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PREVENTING UNAUTHORIZED DISTRIBUTION OF 
MEDIA CONTENT WITHIN A GLOBAL NETWORK 



BACKGROUND 

With advancements in hardware and software technology, computers are integral tools utilized in 
1 0 various applications, such as finance, CAD (computer aided design), manufacturing, health care, 

telecommunication, education, etc. Further, an enhancement in computer functionality can be realized by 
communicatively coupling computers together to form a network. Within a network environment, 
computer systems enable users to exchange files, share information stored in common databases, 
combine or pool resources, communicate via electronic mail (e-mail), and access information on the 
1 5 Internet. Additionally, computers connected to a network environment (e.g., the Internet) provide their 
users access to data and information from all over the world. 

Some of the various types of data that a user can access and share include text data such as that 
found in a word document, graphical data such as that found in pictures (e.g., JPEGs, GIFs, TIFFs) audio 
20 data such as that found in music files (e.g., MP3 files) and video data such as that found in moving pictures 
files (e.g., MPEG, MOV, and AVI files) to name a few. In fact, nearly any type of data can be stored and 
shared with other computer systems. In many instances, the material contained within the various data 
types is copyrighted material. 

25 There are many different types of network environments that can be implemented to facilitate 

sharing of data between computer systems. Some of the various network environment types include 
Ethernet, client-server, and wired and/or wireless network environments. A common utilization of a 
network environment type is for file sharing, such as in a P2P network or point-to-point network. Most 
P2P networks rely on business models based upon the transfer and redistribution of copyrighted material 

30 (e.g., audio files) between computers coupled to a network (e.g., the Internet). A P2P network allows a 
user to acquire the copyrighted material from a computer, a web site source, or a music broadcaster, and 
store and share the material with other users throughout the network, in some instances acting as a web 
site source or a music broadcaster. 

35 It is also common for users sharing files in an uncontrolled manner to use freely distributed or 

commercially available media player applications to experience (e.g., listen, view, and/or watch) the shared 
files. In many instances, these media player applications also provide for downloading the media file from a 
P2P network or from licensed web broadcasters, saving it locally, and then upload the media file onto an 
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unlawful P2P or similar network and/or consumer recording devices. Unlawfully saving a media file can be 
as simple as selecting the save or record function on a media player application. 

Additionally, many of the computers, web sites, and web broadcasters that share copyrighted 
5 material commonly do not control or monitor the files being exchanged between computers. However, 
when web sites attempt to control or restrict the distribution of copyrighted material (e.g., audio files), 
users seeking to circumvent these controls or restrictions can, in many cases, simply utilize the recording 
functionality of a media player application and save the copyrighted material, rename the particular audio 
file, and upload the renamed file, rendering attempts to control or restrict its distribution moot. 

10 

One of the disadvantages associated with the uncontrolled sharing of files, more particularly the 
downloading, saving, and uploading of copyrighted material (e.g., music files) is that there is currently no 
effective means to provide compensation to the copyright owner (e.g., record company, lyricist, musician, 
etc.). Studies have indicated revenue losses in the billions due to unauthorized copying and inaccurate 
1 5 reporting of royalties. 

Current methods of sharing music files do not provide adequate file distribution controls or proper 
accountability with regard to licensing agreements and/or copyright restrictions associated with shared 
copyrighted material. For instance, applications are readily available via the Internet for the express 
20 purpose of producing an exact audio copy of media files. One example is Exact Audio Copy, a freeware 
software program freely available on the Internet which produces an exact audio copy in .wav file format. 
Additionally, there are "ripping" applications, readily available via the Internet, that goes to the audio tracks 
where it can "rip" the audio or video file. 

25 Further, many of the media player/recorder applications are designed to capture and record 

incoming media files in a manner that circumvents controls implemented by a media player application 
inherent to an operating system (e.g., QuickTime for Apple, MediaPlayer for Windows™, etc.) or 
downloadable from the Internet (e.g., RealPlayer and LiquidAudio) or those provided by webcasters (e.g., 
PressPlay) for controlling unauthorized recording of media files. Also, many digital recording devices 

30 (e.g., mini-disc recorders, MP3 recorders, and the like) can be coupled to a digital output of a computer 
system (e.g., a USB port, a S/Pdif out, and the like) to capture the media file. 

It is desirable to prevent recording applications, such as Total Recorder, Sound Forge, and 
numerous others, that are adapted to establish a connection with a kernel level driver operable within an 
35 operating system to capture and redirect a media file to create an unauthorized reproduction of the media 
file. It is also desirable to prevent recording applications from accessing a kernel-mode media device driver 
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and making unauthorized copies of copyrighted material through some available network (e.g., wireline, 
wireless, P2P, etc.) or through a communicative coupling. It is further desirable to prevent access to a 
kernel based media device driver by a recording application for the purpose of making unauthorized 
copies of media files from or to alternative sources, e.g., CD players, DVD players, removable hard drives, 
5 personal electronic and/or recording devices, e.g., MP3 recorders, and the like. 

Current methods of controlling the sharing of media between a plurality of nodes in a network 
environment are inadequate. 

1 0 The present invention may address one or more of the above issues. 
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SUMMARY 

One embodiment of the invention is a method for providing media content while preventing its 
unauthorized distribution. The method includes transmitting from a client to an administrative node a 
request for delivery of an instance of media content; determining which content source of a plurality of 
5 content sources to provide delivery of the instance of media content, provided the client is authorized to 
receive the instance of media content; transmitting to the client an access key and a location of the 
instance of media content; transmitting from the client to the content source a second request and the 
access key; in response to receiving the second request and the access key, transferring the instance of 
media content from the content source to the client; transmitting from the client to the administrative node 
10 an indicator indicating a successful transfer of the instance of media content; and generating a transaction 
applicable to the client and associated with the transfer of the instance of media content to the client. 

In another embodiment, a method for preventing unauthorized access to protected media 
disposed on a media storage device is disclosed. The method includes activating an autorun mechanism 

1 5 disposed on the media storage device in response to a device drive coupled with a client device receiving 
the media storage device. The autorun mechanism is for initiating installation of a compliance mechanism 
on the client device. The method also includes installing the compliance mechanism on the client device 
wherein the compliance mechanism is communicatively coupled with the client device when installed 
thereon. The compliance mechanism is for enforcing compliance with a usage restriction applicable to the 

20 protected media disposed on the media storage device. Additionally, the method includes obtaining 
control of a data input pathway operable on the client device. Furthermore, the method includes 
preventing the protected media of the media storage device from being captured by an extractor 
mechanism via the data input pathway while enabling presentation of the protected media. Moreover, the 
method includes initiating a communication session between the client device and a network from which 

25 the compliance mechanism is available. The network includes a plurality of content sources. 

In yet another embodiment, a method for preventing unauthorized recording of media content is 
disclosed. The method includes transmitting from a client node to an administrative node a request for 
delivery of an instance of media content. The method also includes determining which content source of 

30 a plurality of content sources to provide delivery of the instance of media content, provided the client 
node is authorized to receive the instance of media content. Furthermore, the method includes 
transmitting to the client node an access key and a location of the instance of media content of the 
content source. Additionally, the method includes transmitting from the client node to the content source 
a second request and the access key. In response to receiving the second request and the access key, 

35 the method includes transferring the instance of media content from the content source to the client 

node. Moreover, the method includes activating a compliance mechanism in response to the client node 
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receiving the instance of media content, the compliance mechanism coupled to the client node. The 
client node having a media content presentation application operable thereon and coupled to the 
compliance mechanism. The method also includes controlling a data path of a kernel-mode media device 
driver of the client node with the compliance mechanism upon detection of a kernel streaming mechanism 
5 operable on the client node. Furthermore, the method includes directing the media content from the 
kernel-mode media device driver to a media device driver coupled with the compliance mechanism, via the 
data path, for selectively restricting output of the media content. 

In still another embodiment, a method of preventing unauthorized recording of media content is 
1 0 disclosed. The method includes transmitting from a client system to an administrative system a request for 
delivery of an instance of media content. The method also includes determining which content source of 
a plurality of content sources to provide delivery of the instance of media content, provided the client 
system is authorized to receive the instance of media content. Additionally, the method includes 
transmitting to the client system an access key and a location of the instance of media content of the 
1 5 content source. Moreover, the method includes transmitting from the client system to the content source 
a second request and the access key. In response to receiving the second request and the access key, 
the method includes transferring the instance of media content from the content source to the client 
system. Additionally, the method includes activating a compliance mechanism in response to receiving 
the instance of media content by the client system. The compliance mechanism is coupled to the client 
20 system. The client system having a media content presentation application operable thereon and 

coupled to the compliance mechanism. Furthermore, the method includes controlling a data output path 
of the client system with the compliance mechanism. Moreover, the method includes directing the 
instance of media content to a custom media device coupled to the compliance mechanism via the data 
output path, for selectively restricting output of the media content. 

25 

In another embodiment, a method of controlling interaction of deliverable media content is 
disclosed. The method includes transmitting from a client system to an administrative node a request for 
delivery of an instance of media content. Additionally, the method includes determining which content 
source of a plurality of content sources to provide delivery of the instance of media content, provided the 

30 client system is authorized to receive the instance of media content. Also, the method includes 

transmitting to the client system an access key and a location of the instance of media content of the 
content source. Furthermore, the method includes transmitting from the client system to the content 
source a second request and the access key. In response to receiving the second request and the 
access key, the method includes transferring the instance of media content from the content source to 

35 the client system. Moreover, the method includes detecting a media player application coupled to a client 
system. The media player application is for enabling the client system to present the instance of media 
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content. The method also includes governing a function of the media player application that enables non- 
compliance with a usage restriction applicable to the instance of media content. Additionally, the method 
includes controlling an output of the instance of media content by a compliance mechanism coupled to 
the computer system. The compliance mechanism enables compliance with th usage restriction 
5 applicable to the instance of media content. 

In yet another embodiment, a method for controlling presentation of media content on a media 
storage device. The method includes verifying the presence of a content presentation mechanism and a 
usage compliance mechanism on a client system. The usage compliance mechanism includes a file 

1 0 system filter driver for controlling data reads associated with the media content. Additionally, the method 
includes permitting presentation of the media content via the client system provided the usage 
compliance mechanism is present on the client system, the client system is communicatively coupled with 
a network, and a source node of the network authorizes presentation of the media content. The network 
comprises a plurality of source nodes. Furthermore, the method includes presenting the media content 

1 5 via the content presentation mechanism that is communicatively coupled with the usage compliance 
mechanism. The content presentation mechanism is enabled to present the content when 
communicatively coupled with the source node. 

While particular embodiments of the present invention have been specifically described within 
20 this summary, it is noted that the invention is not limited to these embodiments. The invention is intended 
to cover alternatives, modifications and equivalents which may be included within the scope of the 
invention as defined by the Claims. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram of an exemplary computer system that can be utilized in accordance 
with embodiments of the present invention. 

Figure 2 is a block diagram of an exemplary network environment that can be utilized in 
5 accordance with embodiments of the present invention. 

Figure 3 is a block diagram of a copyright compliance mechanism in accordance with an 
embodiment of the present invention. 

Figure 4 is an exemplary system for implementing a copyright compliance mechanism in 
accordance with an embodiment of the present invention. 
1 0 Figure 5A is a data flow block diagram showing an implementation of a copyright compliance 

mechanism for preventing unauthorized recording of media files, in accordance with an embodiment of 
the present invention. 

Figure 5B is a data flow block diagram showing an implementation of a copyright compliance 
mechanism for preventing unauthorized recording of media files, in accordance with another embodiment 
15 of the present invention. 

Figure 5C is a data flow block diagram showing an implementation of a copyright compliance 
mechanism for preventing unauthorized output of media files, in accordance with an embodiment of the 
present invention. 

Figure 5D is a data flow block diagram showing an implementation of a copyright compliance 
20 mechanism for preventing unauthorized output of media files through media file capture at a kernel level, 
in accordance with an embodiment of the present invention. 

Figure 6 is a block diagram of an environment for preventing unauthorized copying of a media file 
in accordance with an embodiment of the present invention. 

Figure 7A, 7B, and 7C are a flowchart of operations performed in accordance with an embodiment 
25 of the present invention for providing a copyright compliance mechanism to a network of client and server 
computer systems. 

Figure 8 is a diagram of an exemplary global media delivery system in which a copyright 
compliance mechanism can be implemented in accordance with an embodiment of the present invention. 

Figure 9 is a block diagram of components of a copyright compliance mechanism installable from a 
30 media storage device in accordance with an embodiment of the present invention. 

Figure 10 is a block diagram of a communicative environment for controlling unauthorized 
reproduction of protected media files disposed on a media storage device in accordance with an 
embodiment of the present invention. 

Figure 1 1 is a data flow block diagram showing an implementation of a copyright compliance 
35 mechanism for preventing unauthorized reproduction of a protected media file located on a media storage 
device in accordance with an embodiment of the present invention. 
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Figure 12 is a block diagram of components of a usage compliance mechanism installable from a 
media storage device upon which protected media files are disposed, in accordance with an embodiment 
of the present invention. 

Figure 13 is a block diagram of components of a usage compliance mechanism and content 
5 disposed on a media storage device in accordance with an embodiment of the present invention. 

Figure 14 is a block diagram of a communicative environment for controlling presentation of 
content on a media storage device in accordance with an embodiment of the present invention. 

Figure 15 is a data flow block diagram showing an implementation of a usage compliance 
mechanism for controlling presentation of content disposed on a media storage device in accordance with 
10 an embodiment of the present invention. 

Figure 16 is a flowchart of a process for controlling presentation of content disposed on a media 
storage device in accordance with an embodiment of the present invention. 

Figure 17 is a block diagram of a network environment for sharing media content among nodes 
within a network in accordance with an embodiment of the present invention. 
1 5 Figure 18 is a block diagram of components within an exemplary usage compliance mechanism 

configured for utilization in a distributed network topology for controlling media sharing among nodes in a 
network, in accordance with an embodiment of the present invention. 

Figure 19 is a data flow diagram of an exemplary system for controlling media sharing among 
multiple nodes communicatively coupled in a network in accordance with an embodiment of the present 
20 invention. 
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DESCRIPTION OF PREFERRED EMBODIMENTS 

Reference will now be made in detail to embodiments of the invention, examples of which are 
illustrated in the accompanying drawings. While the invention will be described in conjunction with 
embodiments, it will be understood that they are not intended to limit the invention to these 
5 embodiments. On the contrary, the invention is intended to cover alternatives, modifications, and 

equivalents, which may be included within the scope of the invention as defined by the appended claims. 
Furthermore, in the following description, numerous specific details are set forth in order to provide a 
thorough understanding of embodiments in accordance with the present invention. However, it will be 
evident to one of ordinary skill in the art that these embodiments may be practiced without these specific 
1 0 details. In other instances, well known methods, procedures, components, and circuits have not been 
described in detail as not to unnecessarily obscure aspects of the present invention. 

Some portions of the detailed description which follows are presented in terms of procedures, 
logic blocks, processing, and other symbolic representations of operations on data bits within a computing 

1 5 system or digital memory system. These descriptions and representations are the means used by those 
skilled in the data processing art to most effectively convey the substance of their work to others skilled in 
the art. A procedure, logic block, process, etc., is herein, and generally, conceived to be a self-consistent 
sequence of operations or instructions leading to a desired result. The operations are those involving 
physical manipulations of physical quantities. Usually, though not necessarily, these physical 

20 manipulations take the form of electrical or magnetic signals capable of being stored, transferred, 

combined, compared, and otherwise manipulated in a computing system or similar electronic computing 
device. For reasons of convenience, and with reference to common usage, these signals are referred to 
as bits, values, elements, symbols, characters, terms, numbers, or the like, with reference to 
embodiments in accordance with the present invention. 

25 

It should be borne in mind, however, that all of these terms are to be interpreted as referencing 
physical manipulations and quantities and are merely convenient labels and are to be interpreted further in 
view of terms commonly used in the art. Unless specifically stated otherwise as apparent from the 
following discussions, it is understood that discussions of embodiments in accordance with the present 
30 invention refer to actions and processes of a computing system, or similar electronic computing device 

that manipulates and transforms data. The data is represented as physical (electronic) quantities within, for 
example, the computing system's registers and memories and is transformed into other data similarly 
represented as physical quantities within the computing system's memories or registers, or other such 
information storage, transmission, or display devices. 

35 
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Embodiments in accordance with the invention are discussed primarily in the context of a network 
of computer systems such as, but not limited to, desktop, workstation, laptop, handheld, and/or other 
portable electronic device. It is noted that the term "portable electronic device" is not intended to be 
limited solely to conventional handheld or portable computers. Instead, the term "portable electronic 
5 device" is also intended to include many mobile electronic devices such as, but are not limited to, portable 
CD players, MP3 players, mobile phones, portable recording devices, satellite radios, portable video 
playback devices (digital projectors), personal video eyewear, and other personal digital devices. 
Additionally, embodiments in accordance with the invention are also well suited for implementation with 
theater presentation systems for public and/or private presentation in theaters, auditoriums, convention 
1 0 centers, etc. 

Figure 1 is a block diagram illustrating an exemplary computer system 100 that can be used in 
accordance with embodiments of the present invention. It is noted that computer system 100 can be 
nearly any type of computing system or electronic computing device including, but not limited to, a server 

1 5 computer, a desktop computer, a laptop computer, or other portable electronic device. Within the context 
of one or more embodiments of the present invention, certain discussed processes, procedures, and 
operations can be realized as a series of instructions (e.g., a software program) that reside within computer 
system memory units of computer system 100 and are executed by a processor(s) of computer system 
100. When executed, the instructions cause computer system 100 to perform specific actions and exhibit 

20 specific behavior which is described in detail herein. 

Computer system 100 of Figure 1 comprises an address/data bus 1 10 for communicating 
information, one or more central processors 101 coupled to bus 110 for processing information and 
instructions. Central processor(s) 101 can be a microprocessor or any alternative type of processor. 

25 Computer system 100 also includes a computer usable volatile memory 102, e.g., random access memory 
(RAM), static RAM (SRAM), dynamic RAM (DRAM), synchronous dynamic RAM (SDRAM), double data rate 
RAM (DDR RAM), etc., coupled to bus 1 10 for storing information and instructions for processor(s) 101 . 
Computer system 100 further includes a computer usable non-volatile memory 103, e.g., read only 
memory (ROM), programmable ROM, electronically programmable ROM (EPROM), electrically erasable 

30 programmable ROM (EEPROM), flash memory (a type of EEPROM), etc., coupled to bus 1 10 for storing 
static information and instructions for processor(s) 101. In one embodiment, non-volatile memory 103 can 
be removable. 

System 100 also includes one or more signal generating and receiving devices, e.g., signal 
35 input/output device(s) 104 coupled to bus 110 for enabling computer 100 to interface with other 
electronic devices. Communication interface 104 can include wired and/or wireless communication 
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functionality. For example, in one embodiment, communication interface 104 is a serial communication 
port, but can alternatively be one of a number of well known communication standards and protocols, e.g., 
a parallel port, an Ethernet adapter, a FireWire (IEEE 1394) interface, a Universal Serial Bus (USB), a small 
computer system interface (SCSI), an infrared (IR) communication port, a Bluetooth wireless 
5 communication adapter, a broadband connection, a satellite link, an Internet feed, a cable modem, and the 
like. In another embodiment, a digital subscriber line (DSL) can be implemented as signal input/output 
device 104. In such an instance, communication interface 104 may include a DSL modem. 

Computer 100 of Figure 1 can also include one or more computer usable data storage device(s) 
10 108 coupled to bus 1 10 for storing instructions and information, in one embodiment of the present 

invention. In one embodiment, data storage device 108 can be a magnetic storage device, e.g., a hard 
disk drive, a floppy disk drive, a zip drive, or other magnetic storage device. In another embodiment, data 
storage device 108 can be an optical storage device, e.g., a CD (compact disc), a DVD (digital versatile 
disc), or other alternative optical storage device. Alternatively, any combination of magnetic, optical, and 
1 5 alternative storage devices can be implemented, e.g., a RAID (random array of independent disks or 

random array of inexpensive discs) configuration. It is noted that data storage device 108 can be located 
internal and/or external of system 100 and communicatively coupled with system 100 utilizing wired and/or 
wireless communication technology, thereby providing expanded storage and functionality to system 
100. It is further noted that nearly any portable electronic device, e.g., device 100a, can also be 
20 communicatively coupled with system 1 00 via utilization of wired and/or wireless communication 
technology, thereby expanding the functionality of system 100. 

System 100 can also include an optional display device 105 coupled to bus 1 10 for displaying 
video, graphics, and/or alphanumeric characters. It is noted that display device 105 can be a cathode ray 
25 tube (CRT), a thin CRT (TCRT), a liquid crystal display (LCD), a plasma display, a field emission display 
(FED), video eyewear, a projection device, e.g., an LCD or Digital Light Processing (DLP) projector, a 
movie theater projection system, and the like, or any other display device suitable for displaying video, 
graphics, and alphanumeric characters recognizable to a user. 

30 Computer system 100 of Figure 1 further includes an optional alphanumeric input device 106 

coupled to bus 1 10 for communicating information and command selections to processor(s) 101 , in one 
embodiment. Alphanumeric input device 106 includes alphanumeric and function keys. Computer 100 
can also include an optional cursor control device 107 coupled to bus 1 10 for communicating user input 
information and command selections to processor(s) 101. Cursor control device 107 can be implemented 

35 using a number of well known devices such as a mouse, a trackball, a track pad, a joy stick, a optical 

tracking device, a touch screen, etc. It is noted that a cursor can be directed and/or activated via input from 



MOMI-006 



-11- 



CONFIDENTIAL 



alphanumeric input device 106 using special keys and key sequence commands. It is further noted that 
directing and/or activating the cursor can be accomplished by alternative means, e.g., voice activated 
commands, provided computer system 100 is configured with such functionality. 

5 Figure 2 is a block diagram of an exemplary network 200 in which embodiments of the present 

invention may be implemented. Network 200 can enable one or more authorized client computer systems 
(e.g., 210, 220, and 230), each of which are coupled to Internet 201 , to receive media content from a 
media content server, e.g., 251 , via the Internet 201 while preventing unauthorized client computer 
systems from accessing media stored in a database of content server 251 . 

10 

Network 200 includes a web server 250 and content server 251 which are communicatively 
coupled to Internet 201 . Further, web server 250 and content server 251 can be communicatively 
coupled without utilizing Internet 201 , as shown. Web server 250, content server 251 , and client 
computers 210, 220, and 230 can communicate with each other. It is noted that computers and servers of 

1 5 network 200 are well suited to be communicatively coupled in various implementations. For example, web 
server 250, content server 251 , and client computer systems 210, 220, and 230 of network 200 can be 
communicatively coupled via wired communication technology (e.g., twisted pair cabling, fiber optics, 
coaxial cable, etc.) or wireless communication technology, or a combination of wired and wireless 
communication technology. As such, in one embodiment, Internet 201 can be substituted with one or 

20 more communication technologies. Furthermore, Internet 201 can be substituted with one or more 
communication networks that can include one or more communication technologies. 

Still referring to Figure 2, it is noted that web server 250, content server 251 , and client computer 
systems 210, 220 and 230 can, in one embodiment, be each implemented in a manner similar to 
25 computer system 100 of Figure 1 . However, the server and computer systems of network 200 are not 

limited to such implementation. Additionally, web server 250 and content server 251 can perform various 
functionalities within network 200. It is also noted that, in one embodiment, web server 250 and content 
server 251 can both be disposed on a single or a plurality of physical computer systems (e.g., 100). 

30 Further, it is noted that network 200 can operate with and deliver any type of media content, (e.g., 

audio, video, multimedia, graphics, information, data, software programs, etc.) in any format. In one 
embodiment, content server 251 can provide audio and video files to client computers 210-230 via 
Internet 201. 

35 Figure 3 is a block diagram of an exemplary copyright compliance mechanism (CCM) 300, for 

controlling distribution of, access to, and/or copyright compliance of one or more media files, in 
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accordance with an embodiment of the present invention. In one embodiment, CCM 300 contains one or 
more software components and instructions for enabling compliance with the Digital Millennium Copyright 
Act (DMCA) restrictions and/or the Recording Industry Association of America (RIAA) licensing 
agreements regarding media files. Additionally, CCM 300's software components and instructions further 
5 enable compliance with international recording restrictions such as, but not limited to, those defined by 
the International Federation of the Phonographic Industry (IFPI), the International Standard Recording 
Code (ISRC), other foreign or international recording associations, and/or foreign or international licensing 
restrictions. In one embodiment, CCM 300 may be integrated into existing and/or newly developed media 
player and recorder applications. In another embodiment, CCM 300 may be implemented as a stand alone 

1 0 mechanism but in conjunction with existing media player/recorder applications, such that CCM 300 is 
communicatively coupled to existing media player/recorder applications. Alternatively, CCM 300 can be 
installed as a stand alone mechanism within a client computer system 210. Additionally, CCM 300 can be 
installed as a stand alone mechanism and/or as part of a bundled application from a media storage device, 
e.g., a CD, a DVD, an SD (secure digital card), and/or as part of an installation package. In another 

1 5 embodiment, CCM 300 can be installed in conjunction with a presentation of desired media content, e.g., 
listening to an audio file on a music CD, reading a document, viewing a video, etc. It is noted that, in one 
embodiment, CCM 300 may be installed on client system 210 in a clandestine manner, relative to a user. 

There are currently two types of copyright licenses recognized by the Digital Millennium Copyright 
20 Act (DMCA) for the protection of broadcasted copyrighted material. One of the broadcast copyright 

licenses is a compulsory license, also referred to as a statutory license. A statutory license is defined as a 
non-interactive license, meaning the user cannot select the song. Further, a caveat of this type of 
broadcast license is that a user must not be able to select a particular music file for the purpose of 
recording it to the user's computer system or other storage device. Another caveat of a statutory license is 
25 that a media file is not available more than once for a given period of time. In one example, the period of 
time can be three hours. 

The other type of broadcast license recognized by the DMCA is an interactive licensing 
agreement. An interactive licensing agreement is commonly with the copyright holder (e.g., a record 

30 company, the artist, etc.) wherein the copyright holder grants permission for a server (e.g., web server 250 
and/or content server 251 of Figure 2) to broadcast copyrighted material. Under an interactive licensing 
agreement, there are a variety of ways that copyrighted material (e.g., music files) can be broadcast. For 
example, one manner in which music files can be broadcast is to allow the user to select and listen to a 
particular sound recording, but without the user enabled to make a sound recording. This is commonly 

35 referred to as an interactive with "no save" license, meaning that the end user is unable to save or store 
the media content file in a relatively permanent manner. Additionally, another manner in which music files 
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can be broadcast is to allow a user to not only select and listen to a particular music file, but additionally 
allow the user to save that particularly music file to disc and/or burn the music file to a CD, MP3 player, or 
other portable electronic device. This is commonly referred to as an interactive with "save" license, 
meaning that the end user is enabled to save, store, or burn to CD, the media content file. 

5 

It is noted that the DMCA allows for the "perfect" reproduction of the sound recording. A perfect 
copy of a sound recording is a one-to-one mapping of the original sound recording into a digitized form, 
such that the perfect copy is virtually indistinguishable and/or has no audible differences from the original 
recording. 

10 

In one embodiment, CCM (copyright compliance mechanism) 300 can be stored in web server 
250 and/or content server 251 of network 200 and is configured to be installed into each client computer 
system, e.g., 210, 220 and 230, enabled to access the media files stored within content server 251 
and/or web server 250. Alternatively, copyright compliance mechanism 300 can be externally disposed 
1 5 and communicatively coupled with a client computer system 210 via, e.g., a portable media device 100a of 
Figure 1 . In yet another embodiment, CCM 300 can be configured to be operable from a media storage 
device (e.g., 108) upon which media files may be disposed. 

Copyright compliance mechanism 300 is configured to be operable while having portions of 
20 components, entire components, combinations of components, disposed within one or more memory 
units and/or data storage devices of a computer system, e.g., 210, 220, and/or 230. 

Additionally, CCM 300 can be readily updated (e.g., via Internet 201) to reflect changes or 
developments in the DMCA, copyright restrictions and/or licensing agreements pertaining to any media 
25 file, changes in current media player applications and/or the development of new media player 

applications, or to counteract subversive and/or hacker-like attempts to unlawfully obtain one or more 
media files. It is noted that updating CCM 300 can include, but is not limited to, updating portions of 
components, entire components and/or combinations of components of CCM 300. 

30 Referring to Figure 3, in one embodiment CCM 300 can include instructions 301 for enabling 

client computer system 210 to interact with web server 250 and content server 251 of network 200. 
Instructions 301 enable client computer system 210 to interact with servers (e.g., 250 and 251) in a 
network (e.g., 200). 

35 The copyright compliance mechanism 300 also includes, in one embodiment, a user ID generator 

302, for generating a user ID or user key, and one or more cookie(s) which contain(s) information specific 
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to the user and the user's computer system, e.g., 210. In one embodiment, the user ID and the cookie(s) 
are installed in computer system 210 prior to installation of the remaining components of the CCM 300. It 
is noted that the presence of a valid cookie(s) and a valid user ID/user key are verified by web server 250 
before the remaining components of a CCM 300 can be installed, within one embodiment of the present 
5 invention. Additionally, the user ID/user key can contain, but is not limited to, the user's name, the user's 
address, the user's credit card number, an online payment account number, a verified email address, and 
an identity (username) and password selected by the user. Furthermore, the cookie can contain, but is 
not limited to, information specific to the user, information regarding the user's computer system 210 
(e.g., types of media applications operational there within), a unique identifier associated with computer 
1 0 system 210, e.g., a MAC (Media Access Control) address, an IP address, and/or the serial number of the 
central processing unit (CPU) operable on computer system 210 and other information specific to the 
computer system and its user. 

Additionally, in another embodiment, user biometrics may be combined with computer system 
15 210 data and user data and incorporated into the generation of a user ID. Alternatively, biometric data may 
be used in a stand alone implementation in the generation of the user ID. Types of biometric data that may 
be utilized to provide a user ID and/or authorization may include, but is not limited to, fingerprint data, 
retinal scan data, handprint data, facial recognition data, and the like. 

20 It is noted that the information regarding the client computer system, e.g., 210, the user of system 

210, and an access key described herein can be collectively referred to as authorization data. 

Advantageously, with information regarding the user and the user's computer system, e.g., 210, 
web server 250 can determine when a user of one computer system, e.g., 210, has given their username 

25 and password to another user using another computer system, e.g., 220. Because the username, 
password, and the user's computer system 210 are closely associated, web server 250 can prevent 
unauthorized access to copyrighted media content, in one embodiment. It is noted that if web server 250 
detects unauthorized sharing of usernames and passwords, it can block the user of computer system 
210, as well as other users who unlawfully obtained the username and password, from future access to 

30 copyrighted media content available through web server 250. Web server 250 can invoke blocking for 
any specified period of time, e.g., for a matter of minutes, hours, months, years, or longer or permanently. 

Within Figure 3, copyright compliance mechanism 300 further includes a coder/decoder (codec) 
303 that, in one embodiment, is adapted to perform, but is not limited to, encoding/decoding of media 
35 files, compressing/decompressing of media files, and detecting that delivered media files are encrypted 
as prescribed by CCM 300. In the present embodiment, coder/decoder 303 can also extract key fields 
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from a header attached to each media content file for, in part, verification that the file originated from a 
content server, e.g., 251 . It is noted that CCM 300 can include one or more codecs similar to codec 303. 

In the present embodiment, coder/decoder 303 can also perform a periodic and repeated check 
5 of the media file, while the media file is passed to the media player application, e.g., in a frame by frame 
basis or in a buffer by buffer basis, to ensure that CCM 300 rules are being enforced at any particular 
moment during media playback. It is noted that differing coder/decoders 303 can be utilized in 
conjunction with various types of copyrighted media content including, but not limited to, audio files, 
video files, graphical files, alphanumeric files and the like, such that any type of media content file can be 
1 0 protected in accordance with embodiments of the present invention. 

Within Figure 3, copyright compliance mechanism 300 also includes one or more agent programs 
304 which are configured to engage in dialogs and negotiate and coordinate transfer of information 
between a computer system (e.g., 210, 220, or 230), a server (e.g., web server 250 and/or content server 

15 251 ), and/or media player applications, with or without recording functionality, that are operable within a 
client computer system, in one embodiment. In the present embodiment, agent program 304 can also be 
configured to maintain system state, verify that other components are being utilized simultaneously, to be 
autonomously functional without knowledge of the client, and can also present messages (e.g., error 
messages, media information, advertising, etc.) via a display window or electronic mail. This enables 

20 detection of proper skin implementation and detection of those applications that are running. It is noted 
that agent programs are well known in the art and can be implemented in a variety of ways in accordance 
with the present embodiment. 

Copyright compliance mechanism 300 also includes one or more system hooks 305, in one 
25 embodiment of the present invention. A system hook 305 is, in one embodiment, a library that is installed 
in a computer system, e.g., 210, that intercepts system wide events. For example, a system hook 305, in 
conjunction with skins 306, can govern certain properties and/or functionalities of media player 
applications operating within the client computer system, e.g., 210, including, but not limited to, mouse 
click shortcuts, keyboard shortcuts, standard system accelerators, progress bars, save functions, pause 
30 functions, rewind functions, skip track functions, forward track preview, copying to CD, copying to a 
portable electronic device, and the like. 

It is noted that the term govern or governing, for purposes of the present invention, can refer to a 
disabling, deactivating, enabling, activating, etc., of a property or function. Governing can also refer to an 
35 exclusion of that function or property, such that a function or property may be operable but unable to 
perform in the manner originally intended. For example, during the playing of a media file, the progress 
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bar may be selected and moved from one location on the progress line to another without having any 
effect on the play of the media file. 



Within Figure 3, codec 303 compares the information for the media player application operating 
5 on client computer system (e.g., 210) with a list of "signatures" associated with known media recording 
applications. In one embodiment, the signature can be, but is not limited to, a unique identifier of a media 
player application which can consist of the window class of the application along with a product name string 
which is part of the window title for the application. Advantageously, when new media player applications 
are developed, their signatures can be readily added to the signature list via an update of CCM 300 
1 0 described herein. 



The following C++ source code is an exemplary implementation of the portion of a codec 303 for 
performing media player application detection, in accordance with an embodiment of the present 
invention. In another embodiment, the following source code can be modified to detect kernel streaming 
1 5 mechanisms operable within a client system (e.g., 21 0). 



int 

lsRecorderPresent(TCHAR * szAppClass, 

TCHAR * szProdName) 

20 { 

TCHAR szWndText[_MAX_PATH]; I* buffer to receive title string for window */ 
HWND hWnd; /* handle to target window for operation 7 

int nRetVal; I* return value for operation */ 

25 I* initialize variables 7 

nRetVal = 0; 

if ( _tcscmp(szAppClass, _T( ,, #32770 U )) 
= 0) 

30 { 

/* attempt to locate dialog box with specified window title 7 
if ( FindWindow((TCHAR *) 32770, szProdName) 
!= (HWND)O) 

{ 

35 I* indicate application found 7 

nRetVal = 1; 

} 

} 

else 
40 { 

/* attempt to locate window with specified class 7 
if ( (hWnd = FindWindow(szAppClass, (LPCTSTR) 0)) 
!= (HWND)O) 

{ 

45 f* attempt to retrieve title string for window 7 

if( GetWindowText(hWnd, 
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szWndText, 
_MAX_PATH) 

!=0) 

{ 

5 /* attempt to locate product name within title string V 

if ( Jcsstr(szWndText, szProdName) 
!= (TCHAR *)0) 

{ 

r indicate application found */ 
10 nRetVal = 1; 

} 

} 

} 

} 

15 

t* return to caller 7 
return nRetVal; 

} 



20 Within Figure 3, codec 303 can also selectively suppress waveform input/output operations to 

prevent recording of copyrighted media on a client computer system (e.g., 210). For example, codec 
303, subsequent to detection of bundled media player applications operational in a client computer 
system (e.g., 210) can stop or disrupt the playing of a media content file. This can be accomplished, in 
one embodiment, by redirecting and/or diverting certain data pathways that are commonly used for 

25 recording, such that the utilized data pathway is governed by the copyright compliance mechanism 300. 
In one embodiment, this can be performed within a shim driver, e.g., wave shim driver 309 of Figures 5A, 
5B, 5C and 5D. 



A shim driver can be utilized for nearly any software output device such as a standard Windows™ 
30 waveform output device (e.g., Windows™ Media Player) or hardware output device (e.g., speakers or 

headphones). Client computer system 210 is configured such that the shim driver (e.g., 309) appears as 
the default waveform media device to client level application programs. Thus, requests for processing of 
waveform media input and/or output will pass through the shim driver prior to being forwarded to the actual 
waveform audio driver, media device driver (e.g., 505 of Figures 5A-5D). Such waveform input/output 
35 suppression can be triggered by other CCM 300 components (e.g., agent 304) to be active when a 

recording operation is initiated by a client computer system (e.g., 210) during the play back of media files 
which are subject to the DMCA. 



It is noted that alternative shim drivers can be implemented for nearly any waveform output device 
40 including, but not limited to, a Windows™ Media Player. It is further noted that the shim driver can be 

implemented for nearly any media in nearly any format including, but not limited to, audio media files, audio 
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input and output devices, video, graphic and/or alphanumeric media files and video input and output 
devices. 



The following C++ source code is an exemplary implementation of a portion of a codec 303 and/or 
5 a custom media device driver 307 for diverting and/or redirecting certain data pathways that are commonly 
used for recording of media content, in accordance with an embodiment of the present invention. 

DWORD 
_stdcall 

1 0 widMessage(UINT uDevld. 
UINTT uMsg, 
DWORD dwUser, 
DWORD dwParaml, 
DWORD dwParam2) 



15 { 



BOOL bSkip; /* flag indicating operation to be skipped */ 

HWND hWndMon; f* handle to main window for monitor */ 

DWORD dwRetVal; /* return value for operation 7 



20 I* initialize variables */ 

bSkip = FALSE; 

dwRetVal = (DWORD) MMSYSERR_NOTSUPPORTED; 

if (uMsg == WIDM.START) 
25 { 

I* attempt to locate window for monitor application 7 
if ( (hWndMon = FindMonitorWindow()) 
!=(HWND)0) 

{ 

30 I* obtain setting for driver 7 

bDrvEnabled= ( SendMessage(hWndMon, 

uiRegMsg, 
0, 
0) 

35 ==0) 

? FALSE : TRUE; 

} 

if (bDrvEnabled==TRUE) 
40 { 

I* indicate error in operation */ 
dwRetVal = MMSYSERR_NOMEM; 

I* indicate operation to be skipped 7 
45 bSkip = TRUE; 

} 

} 

if (bSkip == FALSE) 
50 { 
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I* invoke entry point for original driver 7 

dwRetVal = CallWidMessage(uDevld, uMsg, dwUser, dwParaml, dwParam2); 

} 

5 /* return to caller 7 

return dwRetVal; 

} 

It is noted that when properly configured, system hook 305 can govern nearly any function or 
1 0 property within nearly any media player application that may be operational within a client computer system 
(e.g., 210). In one embodiment, system hook 305 is a dynamic-link library (DLL) file. It is further noted that 
system hooks are well known in the art, and are a standard facility in a Microsoft Windows™ operating 
environment, and accordingly can be implemented in a variety of ways. However, it is also noted that 
system hook 305 can be readily adapted for implementation in alternative operating systems, e.g., 
1 5 Apple™ operating systems, Sun Solaris™ operating systems, Linux operating systems, and nearly any 
other operating system. 

In Figure 3, copyright compliance mechanism 300 also includes one or more skins 306, which can 
be designed to be installed in a client computer system (e.g., 210, 220 or 230). In one embodiment, skins 

20 306 are utilized to assist in client side compliance with the DMCA (digital millennium copyright act) 

regarding copyrighted media content. Skins 306 are customizable interfaces that, in one embodiment, 
are displayed on a display device (e.g., 105) of computer system 210 and provide functionalities for user 
interaction of delivered media content. Additionally, skins 306 can also provide a display of information 
relative to the media content file including, but not limited to, song title, artist name, album title, artist 

25 biography, and other features such as purchase inquiries, advertising, and the like. Furthermore, when 
system hook 305 is unable to govern a function of the media player application operable on a client 
computer system, e.g., 210, such that client computer system could be in non-compliance with DMCA 
and/or RIAA restrictions, a skin 306 can be implemented to provide compliance. 

30 Differing skins 306 can be implemented depending upon the restrictions (e.g., the DMCA and/or 

RIAA) applicable to each media content file. For example, in one embodiment, a skin 306a may be 
configured for utilization with a media content file protected under a non-interactive agreement (DMCA), 
such that skin 306a may not include a pause function, a stop function, a selector function, and/or a save 
function, etc. Another skin, e.g., skin 306b may, in one embodiment, be configured to be utilized with a 

35 media content file protected under an interactive with "no save" agreement (DMCA), such that skin 306b 
may include a pause function, a stop function, a selector function, and for those media files having an 
interactive with "save" agreement, a save or a burn to CD function. 
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Still referring to Figure 3, it is further noted that in the present embodiment, each skin 306 can 
have a unique name and signature. In one embodiment, skin 306 can be implemented, in part, through 
the utilization of a MD (message digest) 5 hash table or similar algorithm. An MD5 hash table can, in one 
implementation, be a check-sum algorithm. It is well known in the art that a skin, e.g., skin 306, can be 
5 renamed and/or modified to incorporate additional features and/or functionalities in an unauthorized 
manner. Since modification of the skin would change the check sum and/or MD5 hash, without 
knowledge of the MD5 hash table, changing the name or modification of the skin may simply serve to 
disable the skin, in accordance with one embodiment of the present invention. Since copyright 
compliance mechanism (CCM) 300 verifies skin 306, MD5 hash tables advantageously provide a deterrent 
1 0 against modifications made to the skin 306. 

In one embodiment, CCM 300 also includes one or more custom media device driver(s) 307 for 
providing an even greater measure of control over the media stream while increasing compliance reliability. 
A client computer system, e.g., 210, can be configured to utilize a custom media device application (e.g., 

1 5 custom media device 31 0 of Figures 5B, 5C, and 5D) to control unauthorized recording of media content 
files. A custom media device application can be, but is not limited to, a custom media audio device 
application for media files having sound content, a custom video device application for media files having 
graphical and/or alphanumeric content, etc. In one embodiment, custom media device 310 of Figure 5B is 
an emulation of the custom media device driver 307. With reference to audio media, the emulation is 

20 performed in a waveform audio driver associated with custom media device 310. Driver 307 is configured 
to receive a media file being outputted by system 210 prior to the media file being sent to a media output 
device (e.g., 570) and/or a media output application (e.g., recording application 502). Examples of a 
media output device includes, but is not limited to, a video card for video files, a sound card for audio files, 
etc. Examples of a recording application can include, but is not limited to, CD burner applications for 

25 writing to another CD, ripper applications which capture the media file and change the format of the media 
file, e.g., from a CD audio file to an .mpeg audio file, and/or a .wav file, and/or an ogg vorbis file, and various 
other media formats. In one embodiment, client computer system 210 is configured with a custom media 
device driver 307 emulated by custom media device 310, and which is system 210's default device driver 
for media file output. In one embodiment, an existing GUI (graphical user interface) can be utilized or a GUI 

30 can be provided, e.g., by utilization of skin 306 or a custom web based player application or as part of a 
CCM 300 installation bundle, for forcing or requiring system 210 to have driver 307 as the default driver. 

Therefore, when a media content file is received by system 210 from server 251 , the media 
content file is playable, provided the media content file passes through the custom media device 
35 application (e.g., 310 of Figure 5B) that is an emulation of custom media device driver 307, prior to being 
outputted. However, if an alternative media player application is selected, delivered media files from 
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server 251 will not play on system 210. Thus, secured media player applications would issue a media 
request to the driver, e.g., 307, for the custom media device 310 which then performs necessary media 
input suppression (e.g., waveform suppression for audio files) prior to forwarding the request to the 
default Windows™ media driver (e.g., waveform audio driver for audio files). 

5 

In Figure 3, requests for non-restricted media files can pass directly through custom media device 
driver 307 to a Windows™ waveform audio driver operable on system 210, thus reducing instances of 
incompatibilities with existing media player applications that utilize waveform media (e.g., audio, video, 
etc.). Additionally, media player applications that do not support secured media would be unaffected. It is 

1 0 further noted that for either secured media or non-restricted media, e.g., audio media files, waveform input 
suppression can be triggered by other components of CCM 300 (e.g., agents 304, system hooks 305, 
and skins 306, or a combination thereof) to be active when a recording operation is initiated 
simultaneously with playback of secured media files, e.g., audio files. Custom device drivers are well 
known and can be coded and implemented in a variety of ways including, but not limited to, those found at 

1 5 developers network web sites, e.g., a Microsoft™ or alternative OS (operating system) developer web 
sites. 

Advantageously, by virtue of system 210 being configured with a custom media device as the 
default device driver (e.g., 310 of Figures 5B-5D) that is an emulation of a custom media device driver 307, 

20 those media player applications that require their particular device driver to be the default driver, e.g., Total 
Recorder, etc., are rendered non-functional for secured media. Further advantageous is that an emulated 
custom media device provides no native support for those media player applications used as a recording 
mechanism, e.g., DirectSound capture, (direct sound 504 of Figures 5A, 5B, 5C, and 5D) etc., that are 
able to bypass user-mode drivers for most media devices. Additionally, by virtue of the media content 

25 being sent through device driver 307, thus effectively disabling unauthorized saving/recording of media 
files, in one embodiment, media files that are delivered in a secured delivery system do not have to be 
encrypted, although, in another embodiment they still may be encrypted. By virtue of non-encrypted 
media files utilizing less storage space and network resources than encrypted media files, networks 
having limited resources can utilize the functionalities of driver 307 of CCM 300 to provide compliance with 

30 copyright restrictions and/or licensing agreements applicable with a media content file without having the 
processing overhead of encrypted media files. 

Figure 4 is an exemplary system 400 for implementing a copyright compliance mechanism in 
accordance with an embodiment of the present invention. Specifically, system 400 illustrates web server 
35 250, content server 251 , or a combination of web server 250 and content server 251 installing a copyright 
compliance mechanism (e.g., 300) in a client's computer system (e.g., 210) for controlling media file 
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distribution and controlling user access and interaction of copyrighted media files, in one embodiment of 
the present invention. 

Client computer system 210 can communicatively couple with a network (e.g., 200) to request a 
5 media file, a list of available media files, or a play list of audio files, e.g., MP3 files, etc. In response, web 
server 250 determines if the request originates from a registered user authorized to receive media files 
associated with the request. If the user is not registered with the network, web server 250 can initiate a 
registration process with the requesting client 210. Client registration can be accomplished in a variety of 
ways. For example, web server 250 may deliver to client 210 a registration form having various text entry 
1 0 fields into which the user can enter required information. A variety of information can be requested from 
the user by web server 250 including, but not limited to, user's name, address, phone number, credit card 
number, online payment account number, biometric identification (e.g., fingerprint, retinal scan, etc.), 
verifiable email address, and the like. In addition, registration can, in one embodiment, include the user 
selecting a usemame and password. 

15 

Still referring to Figure 4, web server 250 can, in one embodiment, detect information related to 
the client's computer system 210 and store that information in a user/media database 450. For example, 
web server 250 can detect a unique identifier of client computer system 210. In one embodiment, the 
unique identifier can be the MAC (Media Access Control) address of a NIC (network interface card) of client 

20 computer system 210 or the MAC address of the network interface adapter integrated on the 

motherboard of system 210. It is understood that a NIC enables a client computer system 210 to access 
web server 250 via a network such as Internet 201 . It is well known that each NIC typically has a unique 
identifying number MAC address. Further, web server 250 can, in one embodiment, detect and store 
(also in database 450) information regarding the type(s) of media player application(s), e.g., Windows 

25 Media Player™, Real Player™, iTunes player™ (Apple), Live 365™ player, etc. and those media player 
applications having recording functionality (e.g., Total Recorder, Cool Edit 2000, Sound Forge, Sound 
Recorder, Super MP3 Recorder, and the like) that are present and operable in client computer system 
210. In one embodiment, the client information is verified for accuracy and is then stored in a user 
database (e.g., 450) within web server 250. 

30 

Subsequent to registration completion, creation of the user ID and password, and obtaining 
information regarding client computer system 210, all or part of this information can be installed in client 
computer system 210. In one embodiment, client computer system 210 information can be in the form of 
a cookie. Web server 250 then verifies that the user and client computer system 210 data is properly 
35 installed therein and that their integrity has not been compromised. Subsequently, web server 250 

installs a copyright compliance mechanism (e.g., 300) into the client's computer system, e.g., 210, in one 
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embodiment of the present invention. It is noted that web server 250 may not initiate installation of CCM 
300 until the user ID, password, and client computer system 210 information is verified. A variety of 
techniques can be employed to install an entire CCM 300, portions of its components, entire 
components, and/or combinations or a function of its components. For example, CCM 300 can be 
5 installed in a hidden directory within client computer system 210, thereby preventing unauthorized access 
to it. In one embodiment, unless CCM 300 is installed in client computer 210, its user will not be able to 
request, access, or have delivered thereto, media files stored by web server 250 and/or content server 
251. 

10 In Figure 4, upon completion of client registration and installation of CCM 300, client computer 

system 210 can then request a media play list or a plurality of play lists, etc. In response, web server 250 
determines whether the user of client computer system 210 is authorized to receive the media play list 
associated with the request. In one embodiment, web server 250 can request the user's password and 
username. Alternatively, web server 250 can utilize user database 450 to verify that computer 210 is 

1 5 authorized to receive a media play list. If client computer 210 is not authorized, web server 250 can initiate 
client registration, as described herein. Additionally, web server 250 can disconnect computer 210 or 
redirect it to an alternative web site. Regardless, if the user and client computer system 210 are not 
authorized, web server 250 will not provide the requested play list to client computer system 210. 

20 However, if client computer system 21 0 is authorized, web server 21 0 can check copyright 

compliance mechanism 300 within data base 450 to determine if it, or any of the components therein, 
have been updated since the last time client computer system 210 logged into web server 250. If a 
component of CCM 300 has been updated, web server 250 can install the updated component and/or a 
more current version of CCM 300 into client computer system 210, e.g., via Internet 201 . If CCM 300 has 

25 not been updated, web server 250 can then deliver the requested media play list to system 21 0 via 

Internet 201 along with an appended user key or user identification (ID). It is noted that user database 450 
can also include data for one or more media play lists that can be utilized to provide a media play list to 
client computer system 210. Subsequently, the user of client computer system 210 can utilize the 
received media play list in combination with the media player application operating on system 210 to 

30 transmit a delivery request for one or more desired pieces of media content from web server 250. It is 
noted that the delivery request contains the user key for validation purposes. 

Still referring to Figure 4, upon receiving the media content delivery request, web server 250 can 
then check the validity of the requesting media application and the attached user key. In one 
35 embodiment, web server 250 can utilize user database 450 to check their validity. If either or both are 

invalid, web server 250, in one embodiment, can redirect unauthorized client computer system 210 to an 
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alternative destination to prevent abuse of the system. However, if both the requesting media application 
and the user key are valid, CCM 300 verifies that skins 306 are installed in client computer system 210. 
Additionally, CCM 300 further verifies that system hook(s) 305 have been run or are running to govern 
certain functions of those media player applications operable within client computer system 210 that are 
5 known to provide non-compliance with one or more use restrictions such as the DMCA and/or the RIAA. 
Additionally, CCM 300 further diverts and/or redirects certain pathways that are commonly used for 
recording, e.g., driver 307 of Figure 5A, device 310 of Figure 5B, device 570 of Figure 5C, and driver 505 
of Figure 5D. Once CCM 300 has performed the above described functions, web server 250 then, in one 
embodiment, issues to the client computer 210 a redirect command to the current address location of the 
1 0 desired media file content along with an optional time sensitive access key, e.g., for that hour, day, or 
other defined timeframe. 

In response to the client computer system 210 receiving the redirect command from web server 
250, the media player application operating on client computer system 210 automatically transmits a new 

1 5 request and the time sensitive access key to content server 251 for delivery of one or more desired 

pieces of media content. The validity of the time sensitive access key is checked by content server 251 . If 
invalid, unauthorized client computer 210 is redirected by content server 250 to protect against abuse of 
the system and unauthorized access to content server 251 . If the time sensitive access key is valid, 
content server 251 retrieves the desired media content from content database 451 and delivers it to client 

20 computer system 210. It is noted that, in one embodiment, the delivered media content can be stored in 
hidden directories and/or custom file systems that may be hidden within client computer system 210 
thereby preventing future unauthorized distribution. In one embodiment, an HTTP (hypertext transfer 
protocol) file delivery system is used to deliver the requested media files, meaning that the media files are 
delivered in their entirety to client computer system 210, as compared to streaming media which delivers 

25 small portions of the media file. 

Still referring to Figure 4, it is noted that each media file has had, in one embodiment, a header 
attached therewith prior to delivery of the media file. In one embodiment, the header can contain 
information relating to the media file, e.g., title or media ID, media data such as size, type of data, and the 
30 like. The header can also contain a sequence or key that is recognizable to copyright compliance 

mechanism 300 that identifies the media file as originating from content server 251 . In one embodiment, 
the header sequence/key can also contain instructions for invoking the licensing agreements and/or 
copyright restrictions that are applicable to that particular media file. 

35 Additionally, if licensing agreements and/or copyright restrictions are changed, developed, or 

created, or if new media player applications, with or without recording functionality, are developed, CCM 
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300 would have appropriate modifications made to portions of components, entire components, 
combinations of components, and/or the entire CCM 300 to enable continued compliance with licensing 
agreements and/or copyright restrictions. Furthermore, subsequent to modification of copyright 
compliance mechanism 300, modified portions of or the entire updated CCM 300 can be installed in client 
5 computer 210 in a variety of ways. For example, the updated CCM 300 can be installed during client 
interaction with web server 250, during user log-in, and/or while client computer system 210 is receiving 
the keyed play list. 

In Figure 4, it is further noted that, in one embodiment, the media files and attached headers can 
10 be encrypted prior to being stored within content server 251 . In one embodiment, the media files can be 
encrypted utilizing randomly generated keys. Alternatively, variable length keys can be utilized for 
encryption. It is noted that the key to decrypt the encrypted media files can be stored in database 450, 
content database 451 or in some combination of databases 450 and 451 . It is further noted that the 
messages being passed back and forth between client computer system 210 and web server 250 can 
1 5 also be encrypted, thereby protecting the media files and the data being exchanged from unauthorized 
use or access. There are a variety of encryption mechanisms and programs that can be implemented to 
encrypt this data including, but not limited to, exclusive OR, shifting with adds, public domain encryption 
programs such as Blowfish, and non-public domain encryption mechanisms. It is also noted that each 
media file can be uniquely encrypted, such that if the encryption code is cracked for one media file, it is not 
20 applicable to other media files. Alternatively, groups of media files can be similarly encrypted. 

Furthermore, in another embodiment, the media files may not be encrypted when being delivered to a 
webcaster known to utilize a proprietary media player application, e.g., custom media device driver 307. 

Subsequent to media file decryption, the media file may be passed through CCM 300 (e.g., 
25 coder/decoder 303) to a media player application (e.g. playback application 501 of Figures 5A-5D and 6A) 
operating on client computer system 210 which can then access and utilize the delivered high fidelity 
media content, enabling its user(s) to experience the media content (e.g., listen to it, watch it, view it, or 
the like). In one embodiment, a specialized or custom media player (e.g., skin 306 of Figure 3) may or may 
not be required to experience the media content. A skin 306 may be utilized when CCM 300 cannot 
30 modify an industry standard media player application to comply with copyright restrictions and/or licensing 
agreements (e.g., the DMCA). Alternatively, an industry standard media player can be utilized by client 
computer 210 to experience the media content. Typically, many media player applications are available 
and can include, but are not limited to, Windows™ Media Player™ for personal computers (PCs), iTunes™ 
Player or QuickTime™ for Apple computers, and XMMS player for computers utilizing a Linux operating 
35 system. Regardless of the media player application utilized, while the media file is passed to the media 
player application (e.g., in a frame by frame basis or in a buffer), coder/decoder 303 repeatedly ensures 
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that CCM 300 rules are being enforced at any particular moment during media playback, shown as 
operation 650 of Figure 6C. 

As the media file content is delivered to the media player application, periodically (e.g., after a 
5 specified number of frames, after a defined period of time, or any desired time or data period) 

coder/decoder 303 repeatedly determines whether or not all the rules as defined by CCM 300 are 
enforced. If the rules are not enforced (e.g., a user opening up a recording application, such as Total 
Recorder or an alternative application), the presentation of the media content is, in one embodiment, 
suspended or halted. In another embodiment, the presentation of the media content can be modified to 
1 0 output the media content in a non-audibly manner (e.g., silence). In yet another embodiment, the media 
content may be audible but recording functionality can be disabled, such that the media content cannot 
be recorded. These presentation stoppages are collectively shown as operation 651 of Figure 6C. 

If the rules in accordance with CCM 300 are enforced, the codec/decoder 303 retrieves a 
1 5 subsequent portion of the media content that is stored locally in client computer system 210. The newly 
retrieved portion of the media file is then presented by the client's media player application. While the 
newly retrieved portion is presented, CCM 300 again checks that the rules are enforced, and retrieves an 
additional portion of the media file or suspends presentation of the media file if the rules are not being 
enforced. These operations are performed repeatedly throughout the playback of the media file, in a loop 
20 environment, until the media file's contents have been presented in their entirety. Advantageously, by 
constantly monitoring during playing of media files, CCM 300 can detect undesired activities and enforces 
those rules as defined by CCM 300. 

Figure 5A is an exemplary logic/bit path block diagram 500A showing utilization of a wave shim 
25 driver (e.g., 309 of Figure 3) in conjunction with copyright compliance mechanism 300, for selectively 
controlling recording of copyrighted media received by a client computer system (e.g., 210) in one 
embodiment of the present invention. Copyright compliance mechanism 300 is, in one embodiment, 
installed and operational on client system 210 in the manner described herein. 

30 In one embodiment, a copyright compliance mechanism 300 is shown as being communicatively 

coupled with a media playback application 501 via coupling 520. Therefore, CCM 300 is enabled to 
communicate with playback application 501. In one embodiment, CCM 300 can be integrated into a media 
playback application. CCM 300 is also coupled to and controls a selectable switch 31 1 in wave shim driver 
309 (as described in Figure 3) via coupling 522. CCM 300 is further coupled to and controls a selectable 

35 switch 51 1 in direct sound 504 via coupling 521. Depending upon the copyright restrictions and licensing 
agreements applicable to an incoming media file (e.g., 499) CCM 300 controls whether switches 31 1 and 
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51 1 are open (shown), thus preventing incoming media 499 from reaching a media recording application, 
or closed (not shown) to allow recording of incoming media 499. 

For example, incoming media 499 may originate from a content server, e.g., 251 , coupled to 
5 system 210. In another example, incoming media 499 may originate from a personal recording/electronic 
device (e.g., a MP3 player/recorder or similar device) coupled to system 210. Alternatively, incoming 
media 499 may originate from a magnetic, optical or alternative media storage device inserted into a media 
device player coupled to system 210 (e.g., a CD or DVD inserted into a CD or DVD player), a hard disk in a 
hot swappable hard drive, an SD (secure digital card) inserted into a SD reader, and the like. In yet another 

1 0 example, incoming media 499 may originate from another media player application or media recording 
application. Incoming media 499 may also originate from a satellite radio feed (e.g., XM radio), a personal 
communication device (e.g., a mobile phone), a cable television radio input, e.g., DMX (digital music 
express), a digital distribution and/or a public presentation source via a network, Internet or other 
communication connection or coupling, pay-per-view and/or pay-per-play system, or a set-top box. It is 

1 5 noted that incoming media 499 can originate from nearly any source that can be coupled to system 210. 
However, regardless of the source of incoming media 499, embodiments of the present invention, 
described herein, can prevent unauthorized recording of the media 499. 

Figure 5A shows media playback application 501 (e.g., an audio, video, or other media player 
20 application) operable within system 210 and configured to receive incoming media 499. Playback 
application 501 can be a playback application provided by an operating system (e.g., Media Player for 
Windows™ by Microsoft), a freely distributed playback application downloadable from the Internet (e.g., 
RealPlayer or LiquidAudio), a playback application provided by a webcaster (e.g., PressPlay), or a playback 
application commercially available. 

25 

Media device driver 505, in one embodiment, may be a software driver for a sound card coupled to 
system 210 having a media output device 570 (e.g., speakers or headphones) coupled therewith for 
media files having audio content. In another embodiment, media device driver 505 may be a software 
driver for a video card coupled with a display device (e.g., 105) for displaying media files having 

30 alphanumeric and/or graphical content, and so on. With reference to audio files, it is well known that a 
majority of recording applications assume a computer system (e.g., 210) has a sound card disposed 
therein, providing full-duplex sound functionality to system 210. This means media output driver 505 can 
simultaneously cause playback and recording of incoming media files 499. For example, media device 
driver 505 can playback media 499 along wave-out line 539 to media output device 570 (e.g., speakers for 

35 audible playback) via wave-out line 580 while outputting media 499 on wave-out line 540 to eventually 
reach recording application 502. 
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For purposes of Figures 5A, 5B, 5C, and 5D, the terms wave-in line and wave-out line are 
referenced from the perspective of media device driver 505. Additionally, for the most part, wave-in lines 
are depicted downwardly while wave-out lines are depicted upwardly in Figures 5A, 5B, 5C, and 5D. 

5 

Continuing with Figure 5A, playback application 501 is coupled with an operating system (O/S) 
multimedia subsystem 503 via wave-in line 531. O/S multimedia subsystem 503 is coupled to a wave shim 
driver 309 via wave-in line 533 and wave-out line 546. O/S multimedia subsystem 503 is also coupled to 
recording application 502 via wave-out line 548. Operating system (O/S) multimedia subsystem 503 can 
10 be any O/S multimedia subsystem, e.g., a Windows™ multimedia subsystem for system 210 operating 
under a Microsoft O/S, a QuickTime™ multimedia subsystem for system 210 operating under an Apple 
O/S, and the like. Playback application 501 is also coupled with direct sound 504 via wave-in line 551 . 

Direct sound 504, in one embodiment, may represent access to a hardware acceleration feature in 
15 a standard audio device, enabling lower level access to components within media device driver 505. In 
another embodiment, direct sound 504 may represent a path that can be used by a recording application 
(e.g., Total Recorder) that can be further configured to bypass the default device driver (e.g., media 
device driver 505) to capture incoming media 499 for recording. For example, direct sound 504 can be 
enabled to capture incoming media 499 via wave-in line 551 and unlawfully output media 499 to recording 
20 application 502 via wave-out line 568, as well as media 499 eventually going to media device driver 505, 
the standard default driver. 

Still referring to Figure 5A, wave shim driver 309 is coupled with media device driver 505 via wave- 
in line 537 and wave-out line 542. Media device driver 505 is coupled with direct sound 504 via wave-in 
25 line 553 which is shown to converge with wave-in line 537 at media device driver 505. Media device driver 
505 is also coupled with direct sound 504 via wave-out line 566. 

Wave-out lines 542 and 566 are shown to diverge from wave-out line 540 at media device driver 
505 into separate paths. Wave-out line 542 is coupled to wave shim driver 309 and wave-out line 566 is 
30 coupled to direct sound 504. When selectable switches 31 1 and 51 1 are open (shown), incoming media 
499 cannot flow to recording application 502, thus preventing unauthorized recording of it. 

For example, incoming media 499 is received at playback application 501 . Playback application 
501 activates and communicates to CCM 300 regarding copyright restrictions and/or licensing 
35 agreements applicable to incoming media 499. If recording restrictions apply to media 499, CCM 300 can, 
in one embodiment, open switches 31 1 and 51 1 , thereby blocking access to recording application 502 to 
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effectively prevent unauthorized recording of media 499. In one embodiment, CCM 300 can detect if 
system 210 is configured with direct sound 504 selected as the default driver to capture incoming media 
499, via wave-in line 551 , or a recording application is detected and/or a hardware accelerator is active, 
such that wave shim driver 309 can be bypassed by direct sound 504. Upon detection, CCM 300 can 
5 control switch 51 1 such that the output path, wave-out line 568, to recording application 502 is blocked. It 
is further noted that CCM 300 can detect media recording applications and devices as described herein, 
with reference to Figure 3. 

Alternatively, if media device driver 505 is selected as the default driver, incoming media 499 is 
1 0 output from playback application 501 to O/S multimedia subsystem 503 via wave-in line 531 . From 

subsystem 503, media 499 is output to wave shim driver 309 via wave-in line 533. The wave shim driver 
309 was described herein with reference to Figure 3. Media 499 is output from wave shim driver 309 to 
media device driver 505 via wave-in line 537. Once received by media device driver 505, media 499 can 
be output via wave-out line 539 to media output device 570 coupled therewith via wave-out line 580. 
1 5 Additionally, media device driver 505 can simultaneously output media 499 on wave-out line 540 back to 
wave shim driver 309. Dependent upon recording restrictions applicable to media 499, CCM 300 can, in 
one embodiment, close switch 31 1 (not shown as closed), thereby allowing media 499 to be output from 
wave shim driver 309 to subsystem 503 (via wave-out line 546) and then to recording application 502 via 
wave-out line 548. Alternatively, CCM 300 can also open switch 31 1 , thereby preventing media 499 from 
20 reaching recording application 502. 

It is noted that by virtue of CCM 300 controlling both switches 31 1 and 51 1 , and therefore 
controlling wave-out line 548 and wave-out line 568 leading into recording application 502, incoming 
media files (e.g., 499) can be prevented from being recorded in an unauthorized manner in accordance 
25 with applicable copyright restrictions and/or licensing agreements related to the incoming media 499. It is 
also noted that embodiments of the present invention in no way interfere with or inhibit the playback of 
incoming media 499. 

Figure 5B is an exemplary logic/bit path block diagram 500B of a client computer system (e.g., 
30 210) configured with a copyright compliance mechanism 300 for preventing unauthorized recording of 
copyrighted media according to an embodiment of the present invention. Copyright compliance 
mechanism 300 is, in one embodiment, coupled with and operational on client system 210 in the manner 
described herein with reference to Figures 4, 5A, 5C, 5D, 6, and 7. 

35 Diagram 500B of Figure 5B is similar to diagram 500A of Figure 5A, with a few changes. 

Particularly, diagram 500B includes a custom media device 310 communicatively interposed between and 
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coupled to O/S multimedia subsystem 503 and wave shim driver 309. Custom media device 310 is 
coupled to O/S multimedia subsystem via wave-in line 533 and wave-out line 546. Custom media device 
310 is coupled with wave shim driver 309 via wave-in line 535 and wave-out line 544. Additionally, custom 
media device 310 is coupled with direct sound 504 via wave-in line 553 which converges with wave-in line 
5 533 and wave-out line 566 which diverges from wave-out line 546, in one embodiment. Diagram 500B 
also includes a media hardware output device 570 that is coupled to media device hardware driver 505 via 
line 580. Media hardware output device 570 can be, but is not limited to, a sound card for audio playback, 
a video card for video, graphical, alphanumeric, etc., output, and the like. 

10 In one embodiment, CCM 300 is communicatively coupled with playback application 501 via 

coupling 520, waveform shim driver 309 via coupling 522, and custom media device 310 via coupling 525. 
CCM 300 is coupled to and controls a selectable switch 31 1 in waveform shim driver 309 via coupling 522. 
CCM 300 is also coupled to and controls selectable switch 312 in custom audio device 310 via coupling 
525. Depending upon the copyright restrictions and licensing agreements applicable to an incoming 

1 5 media file (e.g., 499), CCM 300 controls whether switches 31 1 and 312 are open (shown), thus 

preventing the incoming media 499 from reaching a recording application, or closed (not shown) so as to 
allow recording of the incoming media 499. 

Continuing with Figure 5B, direct sound 504 is coupled with custom media device 310 via wave-in 
20 line 553, instead of being coupled with media device driver 505 (Figure 5A). In one embodiment, custom 
audio device 310 mandates explicit selection through system 210, meaning that custom audio device 310 
needs to be selected as a default driver of system 210. By virtue of having the selection of custom media 
device 310 as the default driver of system 210, the data path necessary for direct sound 504 to capture 
the media content can be selectively closed. 

25 

For example, incoming media 499 originating from nearly any source described herein with 
reference to Figure 5A is received by media playback application 501 of system 210. Playback application 
501 communicates to CCM 300, via coupling 520, to determine whether incoming media 499 is protected 
by any copyright restrictions and/or licensing agreements. Playback application 501 communicates with 
30 CCM 300 to control switch 31 1 and 312 accordingly. For example, if recording of incoming media 499 

would violate applicable restrictions and/or agreements, switch 312 is in an open position (as shown) such 
that the output path to recording application 502 (e.g., wave-out line 548 and/or wave-out line 568) is 
effectively blocked thereby preventing unauthorized recording of media 499. 

35 Alternatively, if media device driver 505 is selected as the default driver, incoming media 499 

continues from O/S multimedia subsystem 503 through custom media device 310, wave shim driver 309, 
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and into media device driver 505 where media 499 can be simultaneously output to media output device 
570 via line 580, and output on wave-out line 540 to wave shim driver 309 on wave-out line 542. 
However, by virtue of CCM 300 controlling switch 31 1 , wave-out line 544 which eventually leads to 
recording application 502 is blocked, thus effectively preventing unauthorized recording of media 499. 

It is noted that by virtue of CCM 300 controlling both switches 311 and 312 and therefore 
controlling wave-out line 548 and wave-out line 568, any incoming media files (e.g., 499) can be 
prevented from being recorded in an unauthorized manner in accordance with applicable copyright 
restrictions and/or licensing agreements related to the incoming media 499. 

Still referring to Figure 5B, it is further noted that custom media device 310 allows for unfettered 
playback of incoming media 499. Additionally, at any time during playback of media 499, custom media 
device 310 can be dynamically activated by CCM 300. 

1 5 Figure 5C is an exemplary logic/bit path block diagram 500C of a client computer system (e.g., 

210) configured with a copyright compliance mechanism 300 for preventing unauthorized output and 
unauthorized recording of copyrighted media according to an embodiment of the present invention. 
Copyright compliance mechanism 300 is, in one embodiment, coupled with and operational on client 
system 210 in the manner described herein with reference to Figures 4, 5A, 5B, 5D, 6, and 7. 

20 

Diagram 500C of Figure 5C is similar to diagram 500B of Figure 5B, with a few changes. 
Particularly, media hardware output device 570 includes a switch 571 controlled by CCM 300 via 
communication line 523, similar to switches 31 1 and 312, for controlling output of incoming media 499. 
Diagram 500C includes media hardware output device 570 that is coupled with a media device driver 505. 

25 In one embodiment, media hardware output device 570 can be a S/PDIF (Sony/Phillips Digital Interface) 
card for providing multiple outputs (e.g., an analog output 573 and a digital output 575). An alternative 
media hardware output device providing similar digital output can also be implemented as device 570 
including, but not limited to, a USB (universal serial bus) output device and/or an externally accessible 
USB port located on system 210, a FireWire (IEEE 1394) output device and/or an externally accessible 

30 FireWire port located on system 210, with wireline or wireless communication functionality. 

In one embodiment, CCM 300 is communicatively coupled with playback application 501 via 
coupling 520, waveform shim driver 309 via coupling 522, custom media device 310 via coupling 525, and 
media hardware output device 570 via coupling 523. CCM 300 is coupled to and controls selectable 
35 switch 31 1 in waveform shim driver 309 via coupling 522. CCM 300 is also coupled to and controls 

selectable switch 312 in custom audio device 310 via coupling 525. CCM 300 is further coupled to and 
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controls a selectable switch 571 in media hardware output device 570 via coupling 523. Depending upon 
the copyright restrictions and licensing agreements applicable to an incoming media file (e.g., 499), CCM 
300 controls whether switches 31 1 and 312 are open (shown), thus preventing the incoming media 499 
from reaching a recording application, or closed (not shown) so as to allow recording of the incoming 
5 media 499. Additionally, CCM 300 controls whether switch 571 is open (shown), thus preventing 

incoming media 499 from being output from digital output 575 of media hardware output device 570, or 
closed (not shown) to allow incoming media 499 to be output from media hardware output device 570. 

By controlling media hardware output device 570, copyright compliance mechanism 300 can 
1 0 prevent unauthorized output of incoming media 499 to, e.g., a digital recording device that may be 

coupled with digital output 575 of media hardware output device 570. Accordingly, in one embodiment, 
CCM 300 is enabled to also detect digital recording devices that may be coupled to a digital output line 
(e.g., 575), of a media hardware output device (e.g., 570). Examples of a digital recording device that can 
be coupled to media hardware output device 570 include, but is not limited to, mini-disc recorders, MP3 
1 5 recorders, personal digital recorders, digital recording devices coupled with multimedia systems, personal 
communication devices, set-top boxes, and/or nearly any digital device that can capture incoming media 
499 being output from media hardware output device 570 (e.g., a sound card, video card, etc.). 

Within Figure 5C, direct sound 504 is shown coupled with custom media device 310 via wave-in 
20 line 553, instead of being coupled with media device driver 505 (Figure 5A). In one embodiment, custom 
audio device 310 mandates explicit selection through system 210, meaning that custom audio device 310 
needs to be selected as a default driver of system 210. By virtue of having the selection of custom media 
device 310 as the default driver of system 210, the data path necessary for direct sound 504 to capture 
the media content can be selectively closed. 

25 

For example, incoming media 499 originating from nearly any source as described herein with 
reference to Figure 5A is received by media playback application 501 of system 210. Playback application 
501 communicates to CCM 300, via coupling 520, to determine whether incoming media 499 is protected 
by any copyright restrictions and/or licensing agreements. Playback application 501 communicates with 
30 CCM 300 to control switch 31 1 , 312, and 571 accordingly. In the present example, recording of incoming 
media 499 would violate applicable restrictions and/or agreements and therefore switch 312 is in an open 
position, such that the output path to recording application 502 (e.g., wave-out line 548 and/or wave-out 
line 568) is effectively blocked, thereby preventing unauthorized recording of media 499. 

35 Alternatively, if media device driver 505 is selected as the default driver, incoming media 499 

continues from O/S multimedia subsystem 503 through custom audio device 310, wave shim driver 309, 
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and into media device driver 505 where media 499 can be simultaneously output to media output device 
570 via line 580, and output on wave-out line 540 to wave shim driver 309 on wave-out line 542. 
However, by virtue of CCM 300 controlling switch 31 1 , wave-out line 544 which eventually leads to 
recording application 502 is blocked, thus effectively preventing unauthorized recording of media 499. 

5 

It is particularly noted that by virtue of CCM 300 controlling both switches 31 1 and 312 and 
therefore controlling wave-out line 548 and wave-out line 568, any incoming media files (e.g., 499) can be 
prevented from being recording in an unauthorized manner in accordance with applicable copyright 
restrictions and/or licensing agreements related to the incoming media. 

10 

Still referring to Figure 5C, it is noted that although CCM 300 can prevent unauthorized recording 
of incoming media 499 by controlling switches 311 and 312, thus preventing incoming media 499 from 
reaching recording application 502, controlling switches 311 and 312 do nothing to prevent incoming 
media 499 from being captured by a peripheral digital device (e.g., a mini-disc recorder, etc.) coupled to 

1 5 digital output 575 of device 570. Thus, by also controlling digital output 575 of media hardware output 
device 570 via switch 571, CCM 300 can prevent unauthorized capturing of incoming media 499 from 
output 575 (e.g., by a sound card for audio files, a video card for video and/or graphical files) regardless of 
whether incoming media 499 is received in a secure and encrypted manner. However, when switch 571 is 
in a closed position, incoming media 499 may be played back in an unfettered manner. Additionally, at any 

20 time during playback of media 499, switch 312 of custom media device 310, switch 31 1 of media device 
driver 309, and/or switch 571 of media hardware output device 570 can be dynamically activated by CCM 
300. 

Figure 5D is an exemplary logic/bit path block diagram 500D of a client computer system (e.g., 
25 210) configured with a copyright compliance mechanism 300 for preventing unauthorized kernel based 
output and unauthorized recording of copyrighted media according to an embodiment of the present 
invention. Copyright compliance mechanism 300 is, in one embodiment, coupled with and operational on 
client system 210 in the manner described herein with reference to Figures 4, 5A, 5B, 5C, 6, and 7. 

30 Diagram 500D of Figure 5D is similar to diagram 500C of Figure 5C, with some changes. 

Particularly, diagram 500D includes a kernel streaming mechanism 515 (e.g., DirectKS) that is coupled 
with media device driver 505. In one embodiment, DirectKS 515 can be used for establishing a direct 
connection or coupling with media device driver 505. In the present embodiment, media device driver 
505 is shown to include a switch 51 1 controlled by CCM 300 via communication line 524, that is similar to 

35 switches 31 1 , 31 2, and 571 , for controlling output of incoming media 499. 
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In one embodiment, CCM 300 is communicatively coupled with: playback application 501 via 
coupling 520, waveform shim driver 309 via coupling 522, custom media device 310 via coupling 525, and 
media device driver 505 via coupling 524. Specifically, CCM 300 is coupled to and controls selectable 
switch 31 1 of waveform shim driver 309 via coupling 522. CCM 300 is also coupled to and controls 
5 selectable switch 31 2 of custom audio device 31 0 via coupling 525. CCM 300 is further coupled to and 
controls selectable switch 51 1 of media device driver 505 via coupling 524. Depending upon the 
copyright restrictions and/or licensing agreements applicable to an incoming media file (e.g., media 499), 
CCM 300 controls whether switches 311 and 312 are open (shown), thus preventing the incoming media 
499 from reaching recording application 502, or closed (not shown) so as to allow recording of the 
1 0 incoming media 499. Additionally, CCM 300 controls whether switch 51 1 is open (shown), thus 

preventing DirectKS 515 from capturing incoming media 499 and redirecting it to recording application 
502 to create an unauthorized copy or recording of incoming media 499. CCM 300 can also control 
whether switch 51 1 is closed (not shown) to allow DirectKS 515 to capture and redirect incoming media 
499 to recording application 502. 

15 

DirectKS 51 5, in one embodiment, may represent a kernel streaming mechanism that is adapted 
to establish a direct coupling or connection with media device driver 505 of an operating system operable 
on client computer system 210, enabling kernel level access to media device driver 505. A kernel 
streaming mechanism can be implemented for the purpose of precluding utilization of standard audio APIs 

20 (application programming interfaces) to play or record media content, with particular attention paid to those 
playback applications with low latency requirements. DirectKS 515 can bypass existing APIs and 
communicate with media device driver 505. DirectKS 515 can be readily adapted to work in conjunction 
with a playback application (e.g., 501) via coupling 581 to capture incoming media 499 and redirect it to 
media device driver 505 via coupling 583 and then to recording application 502 via wave-out lines 586 and 

25 588. Accordingly, DirectKS 515 can be implemented to create unauthorized media recordings. 

By controlling media device driver 505, copyright compliance mechanism 300 can prevent 
unauthorized output of incoming media 499 to, e.g., a digital recording device 529 that may be coupled 
with recording application 502. In one embodiment, media device driver 505 is configured through the 
30 kernel mixer (not shown) to control the data path. Additionally, in one embodiment CCM 300 is enabled to 
also detect a kernel streaming mechanism 515 (e.g., DirectKS) that may be operable on client computer 
system 210, as described herein with reference to Figure 3. 

In one embodiment, custom media device 310 mandates explicit selection through system 210, 
35 meaning that custom media device 310 needs to be selected as a default driver of system 210. By virtue 
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of having the selection of custom media device 310 as the default driver of system 210, the data path 
necessary for direct sound 504 to capture the media content is selectively closed. 

For example, incoming media 499 originating from nearly any source described herein with 
5 reference to Figure 5A is received by media playback application 501 of system 210. Playback application 
501 communicates to CCM 300, via coupling 520, to determine whether incoming media 499 is protected 
by any copyright restrictions and/or licensing agreements. Playback application 501 communicates with 
CCM 300 to control switches 31 1 , 312, 571 , and 51 1 , accordingly. In the present example, recording of 
incoming media 499 would violate applicable restrictions and/or agreements and therefore switch 51 1 is in 
10 an open position, such that the output path to recording application 502 (e.g., wave-out line 548 and/or 
wave-out line 568 and/or wave-out line 588) is effectively blocked, thereby preventing unauthorized 
recording of media 499. 

Still referring to Figure 5D, it is particularly noted that although CCM 300 can prevent unauthorized 
1 5 recording of incoming media 499 by controlling switches 31 1 , 312, and 571 , thus preventing incoming 

media 499 from reaching recording application 502, controlling switches 31 1, 312, and 571 , do nothing to 
prevent incoming media 499 from being returned to recording application 502 by a kernel streaming 
mechanism 515 (e.g., DirectKS), which enables capturing and redirecting of incoming media 499 to 
recording application 502, via wave-out line 588. Thus, by also controlling switch 51 1 of media device 
20 driver 505, CCM 300 can prevent kernel streaming mechanism 515 from returning incoming media 499 to 
recording application 502, thereby preventing incoming media 499 from being captured and redirected to 
recording application 502 in an attempt to create an unauthorized copy and/or recording of incoming 
media 499. However, when switch 51 1 is in a closed position, incoming media 499 may be returned to 
recording application 502, such that recording could be possible, provided recording does not violate 
25 copyright restrictions and/or licensing agreements applicable to incoming media 499. Additionally, at any 
time during playback of media 499, switch 312 of custom media device 310, switch 31 1 of wave shim 
driver 309, and/or switch 51 1 of media device driver 505 can be dynamically activated by CCM 300. 

Figure 6 is an block diagram of a media file (e.g., incoming media 499) adapted to be received by a 
30 playback application (e.g., 501 of Figures 5A-5D) configured with an indicator 605 for enabling incoming 
media 499 to comply with rules according to the Serial Copy Management System (SCMS). When 
applicable to a media file, e.g., 499, the SCMS allows for one copy of a copyrighted media file to be made, 
but not for copies of copies to be made. Thus, if incoming media 499 can be captured by a recording 
application (e.g., 502 of Figures 5A, 5B, 5C, and/or 5D), a recording device (e.g. 529), a peripheral 
35 recording device and/or a recording application coupled to a digital output of a media hardware output 
device (e.g., digital output 575 of media hardware output device 570 of Figures 5B-5D), and/or a kernel 
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streaming mechanism 515 (e.g., DirectKS of Figure 5D), unauthorized copying and/or recording may be 
accomplished. 

Playback application 501 is coupled with CCM 300 via communication line 520 in a manner 
5 analogous to Figures 5A, 5B, 5C, and/or 5D. Although not shown in Figure 6, it is noted that CCM 300 is 
also coupled to switches 311 and 511 as shown in Figure 5A, switches 311 and 312 in Figure 5B, 
switches 311, 312, and 571 in Figure 5C, and switches 312, 311, 571, and 511, in Figure 5D. 

In one embodiment, an indicator 605 is attached to incoming media 499 for preventing 
1 0 unauthorized copying or recording in accordance with the SCMS. In one embodiment, indicator 605 can 
be a bit that may be transmitted prior to beginning the delivery of incoming media 499 to playback 
application 501 . In another embodiment, indicator 605 may be placed at the beginning of the bit stream of 
incoming media 499. In yet another embodiment, indicator 605 may be placed within a frame period of 
incoming media 499 (e.g., every fifth frame) or any other desired frame period. In still another 
1 5 embodiment, indicator 605 may be transmitted at a particular time interval or intervals during delivery of the 
media file (e.g., 499). Thus, indicator 605 may be placed nearly anywhere within or attached to the bit 
stream related to incoming media 499. 

Within Figure 6, indicator 605 may be comprised of various indicators (e.g., a level 0 indicator, a 
20 level 1 indicator, and a level 2 indicator) in one embodiment of the present invention. In the present 
embodiment, a level 0 indicator may be for indicating to CCM 300 that copying is permitted without 
restriction (e.g., incoming media 499 is not copyrighted or the copyright is not asserted). In the present 
embodiment, a level 1 indicator may be for indicating to CCM 300 that one generation of copies of 
incoming media 499 may be made, such that incoming media 499 is an original copy and that one copy 
25 may be made. In the present embodiment, a level 2 indicator may be for indicating to CCM 300 that 
incoming media 499 is copyright protected and/or a copy thereof, and as such no digital copying is 
permitted. 

For example, incoming media 499 is received by playback application 501 . Application 501 
30 detects an indicator 605 attached therewith, in this example, that is a level 2 bit placed in the bit stream for 
indicating to CCM 300 that copying is not permitted. As such, when CCM 300 is configured in system 210 
such as that shown in Figure 5A, in response to a level 2 indicator bit, CCM 300 while controlling the media 
path then activates switches 31 1 and 51 1 to prevent any recording of incoming media 499. However, 
when CCM 300 is configured in system 210 such as that shown in Figure 5B, in response to a level 2 
35 indicator bit, CCM 300 while controlling the media path then activates switches 31 1 and 312 to prevent 
any recording of incoming media 499. Alternatively, when CCM 300 is configured in system 210 such as 



MOMI-006 



CONFIDENTIAL 



that shown in Figure 5C, in response to a level 2 indicator bit, CCM 300 while controlling the audio path 
then activates switches 311, 312, and 571 to prevent any recording of incoming media 499. 

It is noted that CCM 300 can activate or deactivate switches coupled therewith, as described 
5 herein with reference to Figures 5A-5D, thereby tunneling incoming media 499 through the secure media 
path, in this instance the audio path, to prevent unauthorized copying of incoming media 499. It is further 
noted that CCM 300 can detect media recording applications and devices as described herein, with 
reference to Figure 3. 

1 0 Figures 7A, 7B, and 7C are a flowchart 700 of operations performed in accordance with one 

embodiment of the present invention for controlling end user interaction of delivered electronic media. 
Flowchart 700 includes processes of the present invention which, in some embodiments, are carried out 
by processors and electrical components under the control of computer readable and computer 
executable instructions. The computer readable and computer executable instructions reside, for 

1 5 example, in data storage features such as computer usable volatile memory 1 02 and/or computer usable 
non-volatile memory 103 of Figure 1 . However, the computer readable and computer executable 
instructions may reside in any type of computer readable medium. Although specific operations are 
disclosed in flowchart 700, such operations are exemplary. That is, the present embodiment is well suited 
to performing various other operations or variations of the operations recited in Figures 7A, 7B, and 7C. 

20 Within the present embodiment, it should be appreciated that the operations of flowchart 700 may be 
performed by software, by hardware or by any combination of software and hardware. 

The present embodiment provides a method for restricting recording of high fidelity media 
content delivered via one or more communication networks. The present embodiment delivers the high 

25 fidelity media content to registered clients while preventing unauthorized clients from directly receiving 
media content from a source database. Once the client computer system receives the media content, it 
can be stored in hidden directories and/or custom file systems that may be hidden to prevent subsequent 
unauthorized sharing with others. It is noted that various functionalities can be implemented to protect 
and monitor the delivered media content. For example, the physical address of the media content can be 

30 hidden from media content recipients. Alternatively, the directory address of the media content can be 
periodically changed. Additionally, an access key procedure and rate control restrictor can also be 
implemented to monitor and restrict suspicious media content requests. Furthermore, a copyright 
compliance mechanism (e.g., CCM 300) can be installed in the client computer system 210 to provide 
client side compliance with licensing agreements and/or copyright restrictions applicable to the media 

35 content. By implementing these and other functionalities, the present embodiment restricts access to 
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and the distribution of delivered media content and provides a means for copyrighted media owner 
compensation. 

It is noted that flowchart 700 is described in conjunction with Figures 2, 3, 4, 5A f 5B, 5C f and 5D in 
5 order to more fully describe the operation of the present embodiment. In operation 702 of Figure 7A, a 
user of a computer system (e.g., 210) causes the computer to communicatively couple to a web server 
(e.g., 250) via one or more communication networks (e.g., Internet 201) and proceeds to attempt to log in. 
It is understood that the log in process of operation 702 can be accomplished in a variety of ways in 
accordance with the present embodiment. 

10 

In operation 704 of Figure 7A, web server 250 accesses a user database (e.g., 450) to determine 
whether the user and the computer system 210 logging in are registered with it. If the user and computer 
system 210 are registered with web server 250, the present embodiment proceeds to operation 714. 
However, if the user and computer system 210 are not registered with web server 250, web server 250 
1 5 can initiate a user and computer system 210 registration process at operation 706. 

In operation 706, registration of the user and computer system 210 is initiated. The user and 
computer system registration process can involve the user of computer system 210 providing personal 
information including, but not limited to, their name, address, phone number, credit card number, online 

20 payment account number, biometric identification (e.g., fingerprint, retinal scan, etc.), and the like. Web 
server 250 can verify the accuracy of the information provided. Web server 250 can also acquire 
information regarding the user's computer system 210 including, but not limited to, identification of media 
players disposed and operable on system 210, a unique identifier corresponding to the computer system, 
etc. In one embodiment, the unique identifier corresponding to the computer system can be a MAC 

25 address. Additionally, web server 250 can further request that the user of computer system 210 select a 
username and password. 

In operation 708 of Figure 7A, subsequent to the completion of the registration process, web 
server 250 generates a unique user identification (ID) or user key associated with the user of client 

30 computer system 210. The unique user ID, or user key, is then stored by web server 250 in a manner that 
is associated with that registered user. Furthermore, one or more cookies containing that information 
specific to that user and the user's computer system 210, is installed in a non-volatile memory device (e.g., 
103 and/or data storage device 108 of computer system 210). It is noted that the user ID and cookie can 
be stored in a hidden directory within one or more non-volatile memory devices within computer system 

35 210, thereby preventing user access and/or manipulation of that information. It is further noted that if the 
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unique user ID, or user key, has been previously generated for the user and computer 210 that initially 
logged-in at operation 702, the present embodiment proceeds to operation 714. 

In operation 710, web server 250 verifies that the user ID and the cookie(s) are properly installed 
5 in computer system 21 0 and verifies the integrity of the cookie(s) and the user ID, thereby ensuring no 
unauthorized alterations to the user ID or the cookie(s) has occurred. If the user ID is not installed and/or 
not valid, web server 250 can re-initiate the registration process at operation 706. Alternatively, web 
server 250 can decouple computer system 210 from the network, thereby requiring a re-log in by the user 
of computer 21 0. If the cookie(s) and user ID are valid, the present embodiment proceeds to operation 
10 712. 

In operation 712 of Figure 7A, web server 250 can install a version of a copyright compliance 
mechanism (e.g., 300) onto one or more non-volatile memory devices of computer system 210. Installing 
CCM 300 into user's computer system 210 can facilitate client side compliance with licensing agreements 

1 5 and/or copyright restrictions applicable to specific delivered copyrighted media content. At operation 

712, the components of CCM 300, such as instructions 301, coder/decoder (codec) 303, agent programs 
304, system hooks 305, skins 306, and custom media device drivers 307 (e.g., custom media device 310 
of Figures 5B-5D), are installed in computer system 210, such as that shown in Figures 5A-5D. In one 
embodiment, a hypertext transfer protocol file delivery system can be utilized to install CCM 300 into 

20 computer system 210. However, operation 712 is well suited to install CCM 300 on computer system 210 
in a wide variety of ways in accordance with the present embodiment. For example, CCM 300 can be 
installed as an integrated component within a media player application, media recorder application, and/or 
media player/recorder application. Alternatively, CCM 300 can be installed as a stand alone mechanism 
within client computer system 210. Additionally, CCM 300 can be installed as a stand alone mechanism 

25 and/or as part of a bundled application from a media storage device (e.g., a CD, a DVD, an SD) and/or as 
part of an installation package. In another embodiment, CCM 300 can be installed in conjunction with a 
presentation of desired media content (e.g., listening to an audio file on a music CD, reading a document, 
viewing a video, etc.). It is noted that, in one embodiment, CCM 300 may be installed on client system 210 
in a clandestine manner, relative to a user. 

30 

In operation 714, web server 250 can request the previously established username and password 
of the user of client computer system 21 0. Accordingly, the user of client computer system 210 causes it 
to transmit to web server 250 the previously established username and password. Upon the receipt 
thereof, web server 250 may access a user database (e.g., 450) to determine their validity. If the 
35 username and password are invalid, web server 250 refuses access wherein flowchart 700 may be 
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discontinued (not shown). Alternatively, if the username and password are valid, the present embodiment 
proceeds to operation 716. 

In operation 716 of Figure 7A, web server 250 can access media file database 450 to determine if 
5 copyright compliance mechanism 300 has been updated to reflect changes made to the Digital Millennium 
Copyright Act (DMCA) and/or to the interactive/non-interactive licensing agreements recognized by the 
DMCA. It is noted that alternative licensing agreements can be incorporated into copyright compliance 
mechanism 300. Advantageously, by providing a copyright compliance mechanism that can be readily 
updated to reflect changes in copyright restrictions, licensing agreements, existing media player 
1 0 applications, and/or the development of new media player applications, copyright compliance mechanism 
300 can provide compliance with current restrictions associated with media content. 

Continuing with operation 716, if web server 250 determines that CCM 300 or components 
thereof, of computer 210 has not been updated, web server 250 initiates installation of the newer 
1 5 components and/or the most current version of CCM 300 into computer system 21 0, at operation 718. If 
web server 250 determines that the current version of CCM 300 installed on system 210 does not have to 
be updated, the present embodiment proceeds to operation 720 of Figure 7B. 

In operation 720 of Figure 7B, the user of client computer system 210 causes it to transmit to web 
20 server 250 (e.g., via Internet 201 ) a request for a play list of available media files. It is noted that the play list 
can contain all or part of the media content available from a content server (e.g., 251). 

In operation 722, in response to web server 250 receiving the play list request, web server 250 
transmits to client computer system 210 a media content play list together with the unique user ID 

25 associated with the logged-in user. The user ID, or user key, can be attached to the media content play list 
in a manner invisible to the user. It is noted that the media content in content server 251 can be, but is not 
limited to, high fidelity music, audio, video, graphics, multimedia, alphanumeric data, and the like. The 
media content play list of operation 720 can be implemented in diverse ways. For example, web server 
250 can generate a media content play list by combining all the available media content into a single play 

30 list. Alternatively, all of the media content titles, or different lists of titles, can be loaded from content 

server 251 and passed to a CGI (common gateway interface) program operating on web server 250 where 
the media titles, or differing lists of titles, can be concatenated into a single dimensioned array that can be 
provided to client computer system 210. It is understood that the CGI can be written in nearly any software 
computing language in accordance with the present embodiment. 

35 
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In operation 724 of Figure 7B, the user of client computer system 210 can utilize the received 
media content play list in conjunction with a media player application in order to cause client computer 
system 210 to transmit a request to web server 250 for delivery of desired media content, and wherein the 
user ID is automatically included therewith. The media content play list provided to client computer system 
5 210 by web server 250 can enable the user to create one or more customized play lists by the user 

selecting desired media content titles. It is noted that a customized media play list can establish the media 
content that will eventually be delivered to client computer system 210 and the order in which the content 
will be delivered. Additionally, the user of client computer system 21 0 can create one or more customized 
play lists and store those play lists in system 210 and/or within web server 250. It is noted that a 

1 0 customized play list does not actually contain the desired media content titles, but rather the play list 
includes one or more identifiers associated with the desired media content that can include, but is not 
limited to, a song, an audio clip, a video clip, a picture, a multimedia clip, an alphanumeric document, or 
particular portions thereof. In another embodiment, the received media content play list can include a 
random media content delivery choice that the user of client computer system 210 can transmit to web 

1 5 server 250, with the user ID, to request delivery of the media content in a random manner. 

In operation 726, upon receiving the request for media content from client computer system 210, 
web server 250 determines whether the requesting media application operating on client computer 
system 210 is a valid media application. One of the functions of a valid media application is to be a player of 

20 media content as opposed to an application that downloads media content in an unauthorized or 

unregulated manner. If web server 250 determines that the media application operating on system 210 is 
not a valid media application, the present embodiment proceeds to operation 727 which in one 
embodiment, redirects client computer 210 to a web site where the user of system 210 can download a 
valid media player application or to a software application which can identify client computer system 210, 

25 log system 21 0 out of web server 250 and/or prevent future logging-in for a defined period of time (e.g., 
15 minutes, an hour, a day, a week, a month, a year, or any specified amount of time). If web server 250 
determines that the media application operating on system 210 is a valid media application, the present 
embodiment proceeds to operation 728. 

30 In operation 728 of Figure 7B, the present embodiment causes web server 250 to determine 

whether the user ID (or user key) that accompanied the media delivery request sent by client computer 
system 210 is valid. If web server 250 determines that the user ID is invalid, the present embodiment 
proceeds to operation 729 where client computer system 210 can be logged off web server 250 or client 
computer system 210 can be returned to operation 706 (of Figure 7A) to re-register and to have another 

35 unique user ID generated by web server 250. It is noted that the order in which operations 726 and 728 
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are performed can be altered such that operation 728 can be performed prior to operation 726. If web 
server 250 determines that the user ID is valid, the present embodiment proceeds to operation 730. 

In operation 730, prior to web server 250 authorizing the delivery of the redirect and access key 
5 for the requested media file content, shown as operation 732, CCM 300 governs certain media player 
applications and/or functions thereof that are operable on client computer system 210. These governed 
functions can include, but are not limited to, pause, stop, progress bar, save, etc. It is noted that, in one 
embodiment, CCM 300 can utilize system hooks 305 to accomplish the functionality of operation 730. 

10 In operation 732 of Figure 7C, the present embodiment causes web server 250 to transmit to 

client computer system 210 a redirection command along with a time sensitive access key (e.g., for that 
hour, day or for any defined period of time) thereby enabling client computer 210 to receive the 
requested media content. The redirection command can include a time sensitive address of the media 
content location within content server 251. The address is time sensitive because, in one embodiment, 

1 5 the content server 251 periodically renames some or all of the media address directories, thereby making 
previous content source addresses obsolete. Alternatively, the address of the media content is changed. 
In another embodiment, the location of the media content can be changed along with the addresses. 
Regardless, unauthorized users and/or applications are restricted from directly retrieving and/or copying 
the media content from content server 251 . Therefore, if someone with inappropriate or unlawful 

20 intentions is able to find where the media content is stored, subsequent attempts will fail, as the previous 
route no longer exists, thereby preventing future unauthorized access. 

It is noted that in one embodiment of the present invention, the addresses (or routes) of content 
server 251 that are actively coupled to one or more client computer systems (e.g., 210-230) are 
25 maintained while future addresses, or routes, are being created for new client devices. It is further noted 
that as client computer systems are uncoupled from the media content source of content server 251 , that 
directory address, or link, can be immediately changed, thereby preventing unauthorized client system or 
application access. 

30 In another embodiment, the redirection of client computer system 210 to content server 251 can 

be implemented by utilizing a server network where multiple servers are content providers (e.g., 251), or 
by routing a requesting client computer system (e.g., 210, 220, or 230) through multiple servers. In yet 
another embodiment, the delivery of media content from a central content provider (e.g., 251) can be 
routed through one or more intermediate servers before being received by the requesting client 

35 computer system (e.g., 210). 
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The functionality of operation 732 is additionally well suited to provide recordation of the Internet 
Protocol (IP) addresses of the client computer systems (e.g., 210) the media content requested and its 
transfer size, thereby enabling accurate monitoring of royalty payments, clock usage and transfers, and 
media content popularity. 

5 

In operation 734 of Figure 7C, upon receiving the redirection command, the present embodiment 
causes the media playback application 501 (Figures 5A-5D) operating on client computer system 210 to 
automatically transmit to content server 251 a new media delivery request which can include the time 
sensitive access key and the address of the desired media content. 

10 

In operation 736, content server 251 determines whether the time sensitive access key 
associated with the new media delivery request is valid. If content server 251 determines that the time 
sensitive access key is valid, the present embodiment proceeds to operation 738. However, if content 
server 251 determines that the time access key is not valid, the present embodiment proceeds to 
1 5 operation 737. 

In operation 737, content server 251 can redirect (not shown) client computer 210 to operation 
732 where a new access key is generated. Alternatively, operation 737 can cause the present 
embodiment to return to operation 704 of Figure 7A. In yet another embodiment, operation 737 can 
20 cause client computer system 210 to be disconnected from content server 251. 

In operation 738 of Figure 7C, content server 251 transmits the requested high fidelity media 
content to client computer system 210. It is noted that each media content file delivered to client 
computer system 210 can have a header attached thereto, prior to delivery, as described herein with 
25 reference to Figure 4. It is further noted that both the media content and the header attached thereto can 
be encrypted. In one embodiment, the media content and the header can be encrypted differently. 
Alternatively, each media content file can be encrypted differently. In another embodiment, groups of 
media files are analogously encrypted. It is noted that public domain encryption mechanisms (e.g., 
Blowfish) and/or non-public domain encryption mechanisms can be utilized. 

30 

Still referring to operation 738, content server 251 can transmit the requested media content in a 
burst load (in comparison to a fixed data rate), thereby transferring the content to client computer system 
210 as fast as the network transfer rate allows. Further, content server 251 can have its download rate 
adapted to be equal to the transfer rate of the network to which it is coupled. In another embodiment, the 
35 content server 251 download rate can be adapted to equal the network transfer rate of the client computer 
system 210 to which the media content is being delivered. For example, if client computer system 210 is 



MOMI-006 



-44- 



CONFIDENTIAL 



coupled to Internet 201 via a T1 communications coupling, then content server 251 transfers the media 
content at transmission speeds allowed by the T1 communications line. As such, once the requested 
media content is transmitted to client computer system 210, content server 251 is then able to transmit 
requested media content to another client computer system (e.g., 220 or 230). Advantageously, this 
5 provides an efficient means to transmit media content, in terms of statistical distribution over time and does 
not overload the communication network(s). 

It is noted that delivery of the requested media content by content server 251 to client computer 
system 210 can be implemented in a variety of ways. For example, an HTTP (hypertext transfer protocol) 
1 0 file transfer protocol can be utilized to transfer the requested media content as well as a copyright 

compliance mechanism (e.g., 300) to client 210. In this manner, the copyright compliance mechanism as 
well as each media content file/title can be delivered in its entirety. In another embodiment, content server 
251 can transmit to client computer system 250 a large buffer of media content (e.g., audio clips, video 
clips, and the like). 

15 

In operation 740 of Figure 7C, upon receiving the requested high fidelity media content from 
content server 251, the present embodiment causes client computer system 210 to store the delivered 
media content in a manner that is ready for presentation (e.g., play back). The media content is stored in 
client computer system 210 in a manner that restricts unauthorized redistribution. For example, the 

20 present embodiment can cause the high fidelity media content to be stored in a volatile memory device 
(e.g., 102), utilizing one or more hidden directories and/or custom file systems that may be hidden, where 
it may be cached for a limited period of time. Alternatively, the present embodiment can cause the high 
fidelity media content to be stored in a non-volatile memory device (e.g., 103) or data storage device (e.g., 
108). It is noted that the manner in which each of the delivered media content file(s) is stored, volatile or 

25 non-volatile, can be dependent upon the licensing restrictions and/or copyright agreements applicable to 
each media content file. It is further noted that in one embodiment, when a user of client computer system 
210 turns the computer off or causes client computer system 210 to disconnect from the network, the 
media content stored in a volatile memory device is typically deleted therefrom. 

30 Still referring to operation 740, in another embodiment, the present embodiment can cause client 

computer system 210 to store the received media content in a non-volatile manner within a media 
application operating therein, or within one of its Internet browser applications (e.g., Netscape 
Communicator™, Microsoft Internet Explorer™, Opera™, Mozilla™, and the like) so that delivered media 
content can be used in a repetitive manner. Further, the received media content can be stored in a 

35 manner making it difficult for a user to redistribute in an unauthorized manner, while allowing the user 

utilization of the received media content (e.g., by utilizing one or more hidden directories and/or custom 
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file systems that may also be hidden). It is noted that by storing media content with client computer system 
210 (when allowed by applicable licensing agreements and/or copyright restrictions), content server 251 
does not need to redeliver the same media content to client computer 210 each time its user desires to 
experience (e.g., listen to, watch, view, etc.) the media content file. 

5 

In operation 742 of Figure 7C, the received media content file is then fed into a media player 
application (e.g., 501 of Figures 5A-5D), which then runs it through a codec (e.g., 303 of CCM 300), in 
one embodiment. In response, coder/decoder 303 sends an authorization request to the content server 
251 with attached authorization data, as described herein. In response to receiving codec 303's 
1 0 authorization request, server 251 compares the received authorization data with that stored in server 251 , 
and subsequently, the present embodiment proceeds to operation 744. 

In operation 744, the content server 251 responds with a pass or fail authorization. If server 251 
responds with a fail, such that the received authorization data is invalid, the present embodiment 
1 5 proceeds to operation 745 where server 251 can, in one embodiment, notify the user of client system 
210 (e.g., by utilization of skin 306) that there was an unsuccessful authorization of the requested media 
content file. It is noted that alternative messages having similar meanings may also be presented to the 
user of client computer 210, thereby informing the user that the delivery failed. However, if the 
authorization data passes, the present embodiment proceeds to operation 746. 

20 

In operation 746, content server 251 transmits certain data back to the media player application 
(e.g., 501 of Figures 5A-5D) enabling it to present the contents of the media file. In one embodiment, a 
decryption key can be included in the transmitted data to decrypt the delivered media content file. In 
another embodiment, an encryption/decryption key can be included in the transmitted data to allow 
25 access to the contents of the media file. 

In operation 748 of Figure 7C, the media file can be passed through CCM 300 (e.g., a codec 303) 
to a media player application (e.g., 501) operating on client computer 210 which can then access and 
utilize the delivered high fidelity media content, enabling its user(s) to experience the media content (e.g., 

30 listen to it, watch it, view it, or the like). In one embodiment, a specialized or custom media player may be 
involved in order to experience the media content (e.g., skin 306 of Figure 3). Skin 306 may be 
implemented when CCM 300 cannot modify an industry standard media player application to comply with 
copyright restrictions and/or licensing agreements (e.g., in accordance with the DMCA). Alternatively, a 
specialized or custom media player may not be needed to experience the media content. Instead, an 

35 industry standard media player can be utilized by client computer 210 to experience the media content. 
Typically, many media player applications are available and can include, but are not limited to, Windows™ 
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Media Player™ for personal computers, iTunes™ Player or QuickTime™ for Apple computers, and XMMS 
player for computers utilizing a Linux operating system. Regardless of the media player application 
utilized, while the media file is passed to the media player application (e.g., in a frame by frame basis or in a 
buffer by buffer basis) codec 303 will repeatedly ensure that CCM 300 rules are being enforced at any 
5 particular moment during media playback, shown as operation 750. 

In operation 750, as the media file content is delivered to the media player application, e.g., media 
player application 501 of Figures 5A, 5B, 5C, and 5D, periodically, e.g., after a specified number of frames, 
after a defined period of time, or any desired time or data period, coder/decoder 303 repeatedly 
1 0 determines whether or not all the rules are enforced, in accordance with rules as defined by CCM 300. If 
the rules are not enforced, e.g., change due to a user opening up a recording application (e.g., Total 
Recorder or alternative application) the present method proceeds to operation 751 . If the rules, in 
accordance with CCM 300, are enforced, the present method then proceeds to operation 752. 

1 5 in operation 751 of Figure 7C, if the rules according to CCM 300 are not enforced, the 

presentation of the media content is, in one embodiment, suspended or halted. In one embodiment, 
CCM 300 of Figure 5A can selectively control switches 31 1 and 51 1 to prevent output of incoming media 
499 to a recording application 502 via wave shim driver 309 and direct sound 504 respectively, thus 
preventing unauthorized recording of incoming media 499. In another embodiment, CCM 300 of Figure 

20 5B can selectively control switches 31 1 and 312 to prevent output of incoming media 499 to recording 
application 502 via wave shim driver 309 and custom media device 310, thus preventing unauthorized 
recording of incoming media 499. In yet another embodiment, CCM 300 of Figure 5C can selectively 
control switches 31 1, 312, to not only prevent incoming media 499 from being recorded in an 
unauthorized manner but can also selectively control switch 571 to prevent unauthorized output of 

25 incoming media 499 via digital output 575 of media hardware output device 570. In yet another 

embodiment, CCM 300 of Figure 5D can selectively control switches 311, 312, 571, and 511 to a prevent 
kernel streaming mechanism 515 (e.g., DirectKS) which can establish a connection with media device 
driver 505 from capturing incoming media content and returning it to recording application 502 to create 
an unauthorized recording of the media content. In one embodiment, incoming media 499 may not be 

30 output from digital output 575. In another embodiment, incoming media 499 may be output via digital 
output 575 but in an inaudible manner (e.g., silence). In yet another embodiment, incoming media 499 
can be audible but recording functionality can be disabled, such that the media content cannot be 
recorded. 

35 in operation 752 of Figure 7C, if the rules are enforced in accordance with CCM 300, codec 303 

retrieves a subsequent portion of the media content that is stored locally in client computer system 210. 
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The present embodiment proceeds to operation 748 where the newly retrieved portion of the media file is 
then presented by the client's media player application. In this manner, the playback of the media content 
is constantly monitored by the present embodiment. Advantageously, by constantly monitoring playing 
media files, CCM 300 can detect undesired activities and enforce those rules defined by CCM 300. It is 
5 noted that process 700 can be exited (not shown) once the media file contents are presented in their 
entirety. 

Figure 8 is a diagram of an exemplary high-speed global media content delivery system 800, in 
accordance with an embodiment of the present invention. In one embodiment, system 800 can be 

1 0 utilized to globally deliver media content (e.g., audio media, video media, graphic media, multimedia, 
alphanumeric media, etc.) to one or more client computer systems (e.g., 210, 220, and/or 230) in 
conjunction with a manner of delivery similar to that described herein. In one embodiment, system 800 
includes a global delivery network 802 that can include multiple content servers (e.g., 804, 806, 808, 810, 
812, 814, and 816) that can be located throughout the world and which may be referred to as points of 

1 5 presence or media delivery point(s). Each of content server 804-81 6 can store a portion, a substantial 
portion, or the entire contents of a media content library that can be delivered to client computer systems 
via one or more networks, e.g., a local area network (LAN), Internet 201 , and/or a wide area network 
(WAN). Accordingly, each of content server 804-816 can provide media content to client computer 
systems in its respective vicinity of the world. Alternatively, each content server can provide media 

20 content to a substantial number of client computer systems. 

For example, a media delivery point (MDP) 816, located in Tokyo, Japan, is able to provide and 
deliver media content from the media content library stored in its content database (e.g., 451) to client 
computer systems within the Asiatic regions of the world while a media delivery point 812, located in New 

25 York City, New York, USA, is able to provide and deliver media content from its stored media content library 
to client devices within the Eastern United States and Canada. It is noted that each city name (e.g., 
London, Tokyo, Hamburg, San Jose, Dallas, Amsterdam, or New York City) associated with one of the 
media delivery points 804-816 represents the location of that particular media delivery point or point of 
presence. However, it is further noted that these city names are exemplary because media delivery points 

30 804-816 can be located anywhere within the world, and as such are not limited to the cities shown in 
global network 802. 

Still referring to Figure 8, it is further noted that global system 802 is described in conjunction with 
Figures 2, 3, 4, 5A-D, and 6, in order to more fully describe the operation of the present embodiment. 
35 Particularly, subsequent to a client computer system (e.g., 210 of Figure 2) interacting with a web server 
(e.g., 250 of Figure 2) as described herein, web server 250, in one embodiment, can redirect client 
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computer system 210 to receive the desired media content from an MDP (e.g., 804-816) based on one or 
more differing criteria. 

For example, computer system 210 may be located in Erie, Pennsylvania, and its user causes it to 
5 log-in with a web server 250 which can be located anywhere in the world. It is noted that operations 702- 
730 of Figures 7A and 7B can then be performed as described herein such that the present embodiment 
proceeds to operation 732 of Figure 7C. At operation 732, the present embodiment can determine which 
media delivery point (e.g., 804, 806, 808, 810, 812, 814, or 816) can subsequently provide and deliver 
the desired media content to client computer system 210. 

10 

Still referring to Figure 8, one or more differing criteria can be utilized to determine which media 
delivery point (e.g., 804, 806, 808, 810, 812, 814, or 816) to select for delivery of the desired media 
content. For example, the present embodiment can base its determination upon which media delivery 
point is in nearest proximity to client computer system 210 (e.g., media delivery point 812). This can be 

1 5 performed by utilizing the stored registration information (e.g., address) provided by the user of client 
computer 210. Alternatively, the present embodiment can base its determination upon which media 
delivery point provides media content to the part of the world in which client computer system is located. 
However, if each of the media delivery points (e.g., 804-816) stores differing media content, the present 
embodiment can determine which one can actually provide the desired media content. It is noted that 

20 these are exemplary determination criteria and the embodiments of the present invention are not limited 
to such implementation. 

Subsequent to determination of which media delivery point is to provide the media content to 
client computer system 210 at operation 732, web server 250 transmits to client computer system 210 a 

25 redirection command to a media delivery point/content server (e.g., 812) along with a time sensitive 

access key, also referred to as a session key, (e.g., for that hour, day, or any defined time frame) thereby 
enabling client computer system 210 to eventually receive the requested media content. Within system 
800, the redirection command can include a time sensitive address of the media content location within 
media delivery point 812. Accordingly, the New York City media delivery point 812 can subsequently 

30 provide and deliver the desired media content to client computer system 21 0. It is noted that operations 
732-742 of Figure 7C can be performed by media delivery point 812 in a manner similar to content server 
251 described herein. 

Advantageously, by utilizing multiple content servers (e.g., media delivery point 804-816) to 
35 provide high fidelity media content to client computer systems (e.g., 210-230) located throughout the 
world, communication network systems of the Internet 201 do not become overly congested. 
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Additionally, global network 802 can deliver media content to a larger number of client computer systems 
(e.g., 210-230) in a more efficient manner. Furthermore, by utilizing communication technology having 
data transfer rates of up to 320 Kbps (kilobits per second) or higher, embodiments of the present 
invention provide for rapid delivery of the media content in a worldwide implementation. 

5 

Referring still to Figure 8, it is noted that media delivery points/content servers 804-816 of global 
network 802 can be coupled in a wide variety of ways in accordance with the present embodiment. For 
example, media delivery point 804-816 can be coupled utilizing wired and/or wireless communication 
technologies. Further, it is noted that media delivery points 804-816 can be functionally coupled such 
1 0 that if one of them fails, another media delivery point can take over and fulfill its functionality. Additionally, 
one or more web servers similar to web server 250 can be coupled to global network 802 utilizing wired 
and/or wireless communication technologies. 

Within system 800, content server/media delivery point 804 includes a web infrastructure that, in 
1 5 one embodiment, is a fully redundant system architecture. It is noted that each of the MDP/content server 
806-816 of global network 802 can be implemented to include a web infrastructure in a manner similar to 
the implementation shown in MDP 804. 

Specifically, the web infrastructure of media delivery point 804 includes firewalls 818 and 820 
20 which are each coupled to global network 802. Firewalls 818 and 820 can be coupled to global network 
802 in diverse ways (e.g., utilizing wired and/or wireless communication technologies). Particularly, 
firewalls 818 and 820 can each be coupled to global network 702 via a 10/100 Ethernet handoff. 
However, system 800 is not limited in any fashion to this specific implementation. It is noted that firewalls 
818 and 820 are implemented to prevent malicious users from accessing any part of the web infrastructure 
25 of media delivery point 804 in an unauthorized manner. Additionally, firewall 818 a device 836 (e.g., a 
router or other switching mechanism) coupled therewith and a DB (database) server 840 coupled to 
device 836 while firewall 820 includes a device 838 (e.g., a router or other switching mechanism) coupled 
therewith and a DB (database) server 842 coupled to device 838. Furthermore, DB server 840 is coupled 
with device 838 and DB server 842 is coupled with device 836. 

30 

Still referring to Figure 8, and within media delivery point 804, firewall 818 is coupled to a director 
device 822 which is coupled to internal web application server 826 and 828, and a hub server 830. 
Firewall 820 is coupled to a director 824 which is coupled to internal web application servers 826 and 828, 
and hub server 830. Hub server 830 can be implemented in a variety of ways including, but not limited to, 
35 as a Linux hub server. Hub server 830 is coupled to a data storage device 832 capable of storing media 
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content. Data storage device 832 can be implemented in a variety of ways, e.g., as a RAID (redundant 
array of inexpensive/independent disks) appliance. 

It is noted that media delivery points 804-816 can be implemented in any manner similar to 
5 content server 250 described herein. Additionally, media delivery points 804-816 of the present 
embodiment can each be implemented as one or more physical computing devices (e.g., computer 
system 100 of Figure 1). 

In another embodiment, CCM 300 can be adapted to be disposed on a media storage device 
1 0 (e.g., 999 of Figures 10 and 11). Media storage device 999 can be, but is not limited to, a CD, a DVD, or 
other optical or magnetic storage device. By virtue of disposing a version of CCM 300 on a media storage 
device 999, embodiments of the present invention can provide copy protection for audio, video, 
multimedia, graphics, information, data, software programs, and other forms of media that may contain 
copyrighted material and which may be disposed on a media storage device. Alternatively, CCM 300 can 
15 be adapted to be installed on a computer system (e.g., 210) via a media storage device 999 upon which it 
may be disposed. 

Figure 9 is a block diagram of a copyright compliance mechanism/media storage device 
(CCM/MSD) 900, a version of CCM 300 adapted to be disposed on a media storage device (e.g., 999 of 
20 Figures 10 and 1 1), in accordance with an embodiment of the present invention. It is noted that CCM 300 
in CCM/MSD 900 is analogous to CCM 300 as described in Figures 3, 4, 5A-D, 6A and 7A-C. Further, 
CCM/MSD 900 can be readily updated in accordance with global delivery system 800, as described in 
Figures 7A-C and 8. 

25 In one embodiment, CCM/MSD 900 is adapted to provide stand-alone compliance with copyright 

restrictions and/or licensing agreements applicable to media files that may be disposed on a media storage 
device (e.g., 999). In another embodiment CCM/MSD 900 is adapted to be installed on a computer 
system (e.g., 210) to provide compliance with copyright restrictions and/or licensing agreements 
applicable to media files as described in Figures 3, 4, 5A-D, 6A and 7A-C. 

30 

Referring to Figure 9, CCM/MSD 900 includes an autorun protocol component 910 for invoking 
automatic installation of CCM 300. To deter users from attempts at defeating various features inherent to 
CCM 300 (e.g., the autorun feature), CCM 300's monitoring program, agent program 304, verifies that 
those features that are to be operational are operational, and if not, CCM 300 prohibits the user from 
35 experiencing the contents of the media storage device. 
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If a user somehow defeats the autorun feature, and the user attempts to utilize an application to 
capture an image of the content, the application will make an image of the content on the media storage 
device, which also images the copyright protection contained thereon. As such, when the image is 
played, CCM 300 recognizes the copy protection is present, and CCM 300 will only allow the user to 
5 experience the content when authorized, once CCM 300 is installed. 

By virtue of the protections as described above provided by CCM 300, users will be able to 
experience the content of the media storage device in the content's original high quality format, thereby 
obviating the need to compress the media file used on client system 210. Advantageously, the user will 
1 0 no longer need to suffer through poor quality output as a result of severely compressed media files. 

It is noted that when adapted to be implemented in conjunction with a secure file format, meaning 
that the format of the file is, without proper authorization, non-morphogenic, embodiments of the present 
invention also provide effective compliance with copyright restrictions and/or licensing agreements with 
1 5 secure files formats. CCM 300 can control the types of file formats into which the media file can be 
transformed (e.g., .wav, .mp3, and the like). 

In one embodiment, the autorun feature associated with a media storage device drive (e.g., 1112 
of Figure 10) of client system 210 is activated and operational. Alternatively, a notice of required autorun 
20 activation within client system 210 may be displayed on the media storage device and/or the case in which 
the media storage device is stored. In another embodiment, if CCM 300 is present or if the user is coupled 
to a server, then messages containing instructions on how to activate the autorun feature of client system 
210 may be presented to the user. 

25 In one embodiment, autorun protocol component 910 can detect media storage device drives 

resident on a computer system (e.g., 210). The following C++ source code is an exemplary 
implementation of a portion of autorun protocol component 910 for detecting media storage device drives 
residing and operable on a client computer system (e.g., 210), according to one embodiment of the 
present invention. 

30 

if ( (dwRetVal = GetLogicalDrives()) 
!= (DWORD) 0) 

{ 

/* initialize variables 7 
35 dwMask= (DWORD) 1; 

f* initialize path to root of current drive 7 
Jcscpy(szDrive, _T("A:\\")); 
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for (nlndex = 0, dwMask = (DWORD) 1 ; 
dwMask!= (DWORD) 0; 
nlndex++, dwMask «= 1 ) 

{ 

5 if ((dwRetVal & dwMask) != 0) 

{ 

r construct path to root of drive 7 
szDrive[0] = (TCHAR) 'A' + nlndex; 

1 0 if (GetDriveType(szDrive) = DRIVE_CDROM) 

{ 

MessageBox((HWND) 0, 

_T("CD-ROM drive found."), 
szDrive, 

15 MB_OK); 
} 

else 

{ 

I* clear bit at current position 7 
20 dwRetVal&= (-dwMask); 

} 

} 

} 

} 

25 

In another embodiment, autorun protocol component 910 can detect whether a media storage 
device containing media files has been inserted into a media storage device drive coupled with client 
computer system 21 0 (e.g., drive 1 1 1 2 of Figure 1 0). In another embodiment, COM 300 can include 
instructions for monitoring media storage device drive 1112, and upon detection of drive activation, CCM 
30 300 determines what type of media storage device has been inserted therein. Subsequently, CCM 300 
can detect various triggers on the media storage device to invoke its protection (e.g., a hidden file on 
newer media storage devices and/or the copyright indicator bit on legacy media storage devices) obviating 
the need for autorun. Upon detection, CCM 300 can invoke the appropriate protection for the associated 
media file. 

35 

The following C++ source code is an exemplary implementation of a portion of autorun protocol 
component 910 for detecting a media storage device inserted in a media storage device drive residing 
and operable on a client computer system (e.g., 210), according to one embodiment of the present 
invention. 

40 

I* set error mode for operation 7 
uiErrMode = SetErrorMode(SEM_FAILCRITICALERRORS); 

r initialize path to root of current drive 7 
45 Jcscpy(szDrive, _T("A:\V)); 
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for (nlndex = 0, dwMask = (DWORD) 1 ; 
dwMask != (DWORD) 0; 
nlndex++, dwMask «= 1 ) 

5 { 

if ((dwCDROMMask & dwMask) != 0) 

{ 

t construct path to root of drive 7 
szDrive[0] = (TCHAR) 'A' + nlndex; 

10 

if( GetDiskFreeSpace(szDrive, 

&dwSeclons, 
&dwBytes, 
&dwClustersFree, 
1 5 &dwClusters) 
!=0) 

{ 

f add bit for drive to mask */ 
dwRetVaJ l= dwMask; 

20 } 

} 

} 

r restore original error mode 7 
25 SetErrorMode(uiErrMode); 



Additionally, autorun protocol component 910 can also detect changes in media (e.g., insertion of 
a different media storage device 999). Further, other media changes can be detected subsequent to 
30 adaptation of the source code including, but not limited to, detecting a previously accessed media file 
and/or detecting a previously inserted media storage device. 



The following C++ source code is an exemplary implementation of a portion of autorun protocol 
component 910 for detecting a change in media, according to one embodiment of the present invention. 

35 

I* initialize path to root of current drive */ 
Jcscpy(szDrive, _T("A:\Y')); 

for (nlndex = 0, dwMask = (DWORD) 1 ; 
40 dwMask != (DWORD) 0; 

nlndex++, dwMask «= 1) 

{ 

r check for presence of CD-ROM media in drive */ 
if ((dwCurrMask & dwMask) != 0) 

45 { 

/* check if media previously in drive 7 
if ((dwPrevMask & dwMask) = 0) 

{ 

/* construct path to root of drive 7 
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szDrive[0] = (TCHAR) TV + nindex; 



10 



r check for presence of marker on drive 7 
if (lsMPBMarkerPresent(szDrive) !=0) 

r process autorun information present on drive */ 
nRetVal = ProcessAutorun(szDrive); 



Still referring to Figure 9, CCM/MSD 900 also includes a kernel level filter driver 920 for controlling 
15 a data input path of an operating system coupled with and operable on client computer system 210. 

CCM/MSD 900 also includes a generalized filter driver 930 for controlling ripping and "burning" 
applications (e.g., Nero, Roxio, Exact Audio Copy, and the like) thereby preventing such activities. The 
following C++ source code is an exemplary implementation of a portion of generalized filter driver 930 for 
20 controlling ripping and burning applications that may be residing on and operable within a client computer 
system (e.g., 210), in accordance with one embodiment of the present invention. 

bool bDisabled; /* flag indicating CD reads disabled 7 

25 r initialize variables */ 

bDisabled = false; 

if (bProtected == true) 

{ 

30 if (type == IRP_MJ_DEVICE_CONTROL) 

{ 

ULONG ulloControlCode = stack->Parameters.DeviceloControl.loControlCode; 

if (ulloControlCode == IOCTL_SCSLPASS_THROUGH) 
35 { 

SCSLPASS_THROUGH * pspt = (SCSLPASSJTHROUGH *) 
lrp->Associatedlrp.SystemBuffer; 

if( (pspt != NULL) 

40 && (pspt->Cdb[0] == SCSIOP_READ_CD)) 



{ 



pspt->DataTransferLength = 0; 
pspt->ScsiStatus = 0; 



45 bDisabled = true; 

} 

} 

else if (ulloControlCode == IOCTL_SCSI_PASS_THROUGH_DIRECT) 
{ 
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SCSI_PASS_THROUGH_DIRECT * psptd = 
(SCSI_PASS_THROUGH_DIRECT *) 
lrp->Associatedlrp.SystemBuffer; 

5 if( (psptd != NULL) 

&& (psptd->Cdb[0] == SCSIOP_READ_CD)) 

{ 

psptd->DataTransferLength = 0; 
psptd->ScsiStatus = 0; 

10 

bDisabled = true; 

} 

} 

} 

15 } 

if (bDisabled == true) 
{ 

I* complete current request */ 
20 status = CompleteRequest(lrp, STATUS_SUCCESS, 0); 

} 

else 
{ 

r pass request down without additional processing */ 
25 status = loAcquireRemoveLock(&pdx->RemoveLock f Irp); 

if (!NT_SUCCESS(status)) 

return CompleteRequest(lrp f status, 0); 

30 loSkipCurrentlrpStackLocation(lrp); 

status = loCallDriver(pdx->LowerDeviceObject, Irp); 
loReIeaseRemoveLock(&pdx->Removel_ock, Irp); 

} 

35 

Still referring to Figure 9, CCM/MSD 900 includes a CCM 300, analogous to CCM 300 of Figure 3, 
that is adapted to be installed in client computer system 210 in one or more ways similar to those 
described herein. 



40 In one embodiment, kernel level filter driver 920, generalized filter driver 930 and CCM 300 of 

CCM/MSD 900 are automatically installed on client computer system 210, subsequent to insertion of 
media storage device 999 into a media storage device drive (e.g., 1 1 12 of Figures 10 and 11). Autorun 
protocol component 910, as described above, detects insertion of media storage device 999 into an 
appropriate drive, and initiates installation of the components (e.g., CCM 300, driver 920 and driver 930). 

45 In one embodiment, drivers 920 and 930 may be temporarily installed and may be deleted upon removal 
of media storage device 999 from media storage device drive 1112. In yet another embodiment, drivers 
920 and 930 may be installed in hidden directories and/or files within client computer system 210. In 
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another embodiment, some components of CCM 300 can remain installed on client system 210, e.g. the 
monitoring program (agent program 304). In still another embodiment, other components (e.g., the kernel 
level filter driver 920) can be dynamically loaded and unloaded as necessary in accordance with copyright 
restrictions and/or licensing agreements applicable to the media file. 

5 

Embodiments of the present invention utilize software (e.g., CCM/MSD 900) that is placed on 
media storage device 999, in conjunction with controlling software CCM 300 installed on client computer 
system 210, and web server 250 and/or content server 251 , wherein each component is communicatively 
coupled with the other via the Internet, thereby enabling dynamic updating of CCM 300 in the manner as 
1 0 described with reference to Figure 4, and operations 716 and 718 of Figures 7A-C. 

In the present embodiment, CCM/MSD 900 provides a stand alone digital rights management 
(DRM) that is far more sophisticated than existing DRM solutions. This is because CCM/MSD 900 goes 
into the data pathway of the operating system operable on client computer system 210 and obtains 
1 5 control of the data pathway (e.g., filter driver 1 108 of Figure 11) rather than exploiting inefficiencies or 
errors in the computer system. 

Figure 10 is a block diagram of a communicative environment 1000 for controlling unauthorized 
reproduction of protected media files disposed on a media storage device in accordance with an 

20 embodiment of the present invention. Included in communicative environment 1000 is a media storage 
device drive 1112 coupled with a client computer system 210 via a data/address bus 110. Client 
computer system 210 is coupled with web server 250 and content server 251 via Internet 201 . A media 
storage device 999, upon which a CCM/MSD 900 may be disposed, can be inserted in media storage 
device drive 1112. As such, autorun protocol component 910 detects the insertion and automatically 

25 invokes installation of CCM 300, kernel level filter driver 920 and generalized filter driver 930 from media 
storage device 999 into client computer system 210. Subsequent to installation, CCM 300 initiates a 
dynamic update with web server 250 and/or content server 251 , via Internet 201 . By installing CCM 300 
on client computer system, agent program 304 (Figure 3) of CCM 300 is able to control the integrity of the 
software associated with CCM/MSD 900. Additionally, by conferring with servers 250 and/or 251 via 

30 Internet 201 online, the CCM 300 software version on media storage device 999 and installed on client 
computer system 210 can be updated when circumventions occur and/or kept current from platform to 
platform. 

Advantageously, the monitoring mechanism of agent program 304 enables constant morphing of 
35 the version of CCM 300 disposed on media storage device 999 by communicating with server 250 and/or 
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251 and utilizing the dynamic update capabilities of global network 800 to readily update that which has 
been installed on client computer system 210, via media storage device 999. 

In one embodiment, the installation is performed clandestine with respect to the user and is 
5 initiated by inserting media storage device 999 into an appropriate media storage device drive (e.g. a 
magnetic/optical disk drive or alternative device drive) coupled with client system 210. If the user is not 
registered with CCM 300, as described herein with reference to Figure 4 and Figures 7A-7C, once 
installed, CCM 300 initiates an update process with web server 250 and/or content server 251 to readily 
include updates that have been invoked subsequent to release of the media file on media storage device 

1 0 999. By virtue of the dynamic update capabilities of CCM 300, regardless of the version of CCM 300 on 
media storage device 999, CCM 300 provides compliance with copyright restrictions and/or licensing 
agreements applicable to the media file on media storage device 999. Advantageously, enabling dynamic 
adaptability of CCM 300 provides for continued interoperability with new and updated operating systems, 
advancements in electronic technology, communication technologies and protocols, and the like, 

1 5 ensuring the effectiveness of CCM 300 into the future. 

In another embodiment, if the user is a registered user with global delivery system 800, CCM 300 
can detect which version is most current. Accordingly, when the version existing on client system 210 is 
more current that the version (for install) on media storage device 999, CCM 300 can bypass the install 
20 process and present the contents contained on media storage device 999 to the user for them to 
experience. 

Further advantageous, this technology is backward compatible with media storage device drives 
manufactured subsequent to and including the year of 1982. Additionally, CCM 300 is compatible with 
25 media storage devices having a copyright indicator bit disposed thereon. The copyright indicator bit has 
been included on all CDs released since the year of 1982. 

In the present embodiment of Figure 10, the media content is not encrypted on media storage 
device 999. In one embodiment, if the media content of media storage device 999 is encrypted on 
30 computer 210, it can be decrypted on the computer 210. However, home players and/or stand alone 
media playing devices rarely include a decryption mechanism, and to experience the music on a home 
machine, the music is conventionally not encrypted. 

In one embodiment, an additional component of CCM 300 is that the trigger for agent program 
35 304 may be the copyright bit indicator. This means when the copyright indicator bit is detected by CCM 
300, the functions of CCM 300 are initiated. Alternatively, in another embodiment, when the copyright bit 
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indicator is not detected, CCM 300 may remain in an un-invoked or idle state. If CCM 300 can detect the 
copyright bit indicator, CCM 300 can provide the appropriate compliance with regard to copyright 
restrictions and/or licensing agreements applicable to the media files. 

5 In an alternative embodiment, a trigger control in the table of contents of media storage device 

999 includes instructions for triggering autorun protocol 910 of CCM/MSD 900 and can utilize the 
copyright indicator bit or alternative implementation to trigger the technology. In this manner, CCM 300 
can control copyrighted works while public domain material can be experienced and reproduced at a 
user's discretion. Because autorun can be problematic for media storage device manufacturers, 
1 0 embodiments of CCM/MSD 900 can include alternative autorun programs that perform analogous to 
autorun. 

In another embodiment, CCM 300 can invoke its own proprietary player (e.g., custom media 
device 310 as described with reference to Figure 3), thus enabling increased control of copyright 
1 5 restrictions and/or licensing agreements applicable to the media. By invoking custom media device 310, 
CCM 300 enables user experience of the media while providing protection against unauthorized 
reproduction of the media disposed on media storage device 999. 

In an alternative embodiment, the media files and the CCM/MSD 900 disposed on a media storage 
20 device 999 are encrypted. This implementation is particularly advantageous for demonstration (demo) 
versions of media files, beta test versions, and the like that may be disposed on media storage device 
999. It is noted that the present embodiment is operable in an online environment, meaning that client 
computer system 210 is communicatively coupled with web server 250 and/or content server 251 to 
enable a user experience of the content on a demo version of media storage device 999. In this 
25 implementation, CCM 300 allows for specific plays for specific users, which can be controlled via a network 
(e.g., network 1000 of Figure 10) and server 250 and/or 251. 

In another embodiment, CCM 300 can be implemented for demo and/or pre-release protection. 
In this embodiment, CCM 300 utilizes sophisticated encryption technology to encrypt the table of 
30 contents and CCM 300 with an associated decrypted key located on client computer system 210. 

Encrypting CCM 300 can also deter nefarious attempts to reverse engineer CCM 300. Decryption can be 
performed using an associated decryption key. Alternatively, decryption can be performed by a 
proprietary or custom media player application resident on demo media storage device (e.g., 999). 

35 The content of media storage device 999 is encrypted, using various levels of encryption to 

provide protection levels commensurate with copyright holder's desires and required protection. For 
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example, media storage device 999 is delivered to a user or critic for the purposes of review, the user 
inserts media storage device 999 into the appropriate storage device reader or connector coupled with 
the journalist's computer (e.g., 210), and CCM 300 is installed on client system 210 in a manner 
clandestine to the user. Once installed, CCM 300 initiates a communication session with web server 
5 250/content server 251 , where content server 251 can provide authorization for the user to experience 
the media on media storage device 999. 

Accordingly, if the user, to whom demo media storage device 999 had been released, had demo 
media storage device 999 stolen, or if the user allowed alternative parties to try to experience the content 
10 of media storage device 999, the unauthorized party would have to try to crack the encryption keys and 
the encryption of the actual content of media storage device 999, consuming non-trivial amounts of time. 

Thus, CCM 300 is able to control which users receive authorization to experience the media of 
media storage device 999, how many times the user may experience the media, and CCM 300 may also 
1 5 define a period of time until the media may no longer be accessible. This may enable copyright holders to 
release the content on an authorized media storage device (e.g., 999) prior to "pirated" copies flooding 
the market. 

Accordingly, a demo media storage device 999 may be configured such that a first user may get a 
20 copy, a second user may get a copy, and if it is known that the second user will share the demo with a third 
and a fourth user, then the known users would be enabled to experience the media. Advantageously, by 
virtue of defining which users can access and experience the media, any unauthorized sharing of the 
media by one of the authorized users can be readily detected, and further sharing or experiencing of the 
media may be halted. Additionally, because the authorized user shared the media in an unauthorized 
25 manner, in a worse case scenario, criminal charges could be filed against that user. 

It is noted that placing CCM/MSD 900 on a media storage device (e.g., 999) so as to enable 
installation of CCM 300 on client system 210 is one manner in which CCM 300 can be installed on client 
system 210. An alternative manner in which CCM 300 can be installed on client computer system 210 is 

30 through "cross-pollination." For example, webcasters broadcast the media file to the user. The media file 
has a CCM 300 coupled with the media file, and upon downloading the media file onto client computer 
system 210, embodiments of the present invention enable the installation of CCM 300 onto client 
computer system 210. In another manner, CCM 300 is incorporated into and becomes part of an 
operating system operational on client system 210. Alternatively, laws are passed that mandate the 

35 inclusion of CCM 300 on each client computer system 210. 
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Figure 1 1 is an exemplary logic/bit path block diagram 1 100 of a client computer system, e.g., 
210, configured with a copyright compliance mechanism (CCM) 300 for preventing unauthorized 
reproduction of copyrighted media according to an embodiment of the present invention. Copyright 
compliance mechanism 300 is, in one embodiment, coupled with and operational on client system 210 in 
5 any manner similar to that described herein with reference to Figures 4, 5A-5D, 6A, 7A-7C, 9, and 10. 

Diagram 1 100 of Figure 1 1 includes a media storage device media extraction/creation application 
1 1 02 communicatively coupled to operating system input/output subsystem 1 1 04 via wave in line 1121 
and wave out line 1 138. Operating system input/output subsystem 1 104 is coupled with media storage 

1 0 device class driver 1 1 06 via wave in line 1 1 23 and wave out line 1 1 36. Media storage device class driver 
1 106 is coupled with filter driver 1 108 via wave in line 1 125 and wave out line 1 134. Filter driver 1 108 is 
coupled with media storage device port driver 1 1 10 via wave in line 1 127 and wave out line 1 132. Filter 
driver 1 108 is shown to include a switch 1111, controlled by CCM 300 via coupling 1 160. Media storage 
device port driver 1 1 1 0 is coupled with media storage device drive 1 1 1 2 via wave line in 1 1 29 and wave 

1 5 line out 1 130. Media storage device 999, shown to include CCM/MSD 900 is receivable by media storage 
device drive 1112. Additionally, CCM 300 is coupled with operating system input/output subsystem 1 104 
via wave in line 1 1 50 and wave out line 1151. 

In one embodiment, CCM 300 is coupled to and controls selectable switch 1 1 1 1 in filter driver 
20 1 108. Depending upon the copyright restrictions and/or licensing agreements applicable to a media file 
disposed on media storage device 999, CCM 300 controls whether switch 1111 is open (shown), thus 
preventing the media file from reaching media extraction/creation application 1 1 02, or closed (not shown) 
so as to allow reproduction of the protected media file. Media extraction/creation application 1 102 can be 
a "ripping" or "burning" application such as Nero, Roxio, Exact Audio Copy, or other readily available 
25 application. 

Continuing with Figure 11, media storage device 999 is received by media storage device drive 
1112. CCM 300 determines whether media storage device 999 or media disposed thereon is protected 
by any copyright restrictions and/or licensing agreements, e.g., via detection of a copyright indicator bit. 
30 CCM 300 communicates with filter driver 1 1 08 to control switch 1111 accordingly. In the present example, 
reproducing media storage device 999, and/or the contents thereon, would violate applicable restrictions 
and/or agreements and therefore switch 1111 is in an open position such that the output path (e.g., wave- 
out line 1138) to media extraction/creation application 1102 is effectively blocked thereby preventing 
unauthorized reproduction of media storage device 999. 

35 
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It is particularly noted that by virtue of CCM 300 controlling switch 1111, and therefore controlling 
wave-out line 1 138, any incoming copyright protected media disposed on a media storage device 999 can 
be prevented from being reproduced in an unauthorized manner in accordance with applicable copyright 
restrictions and/or licensing agreements related to the incoming media. 

5 

Advantageously, as new secure or proprietary file formats are developed, CCM 300 can be readily 
adapted to be functional therewith. Further, CCM/MSD 900 can prevent users from making unauthorized 
reproductions (e.g., recording, copying, ripping, burning, etc.) of media files. By using kernel level filter 
drivers (e.g., filter driver 1 108) and getting to a low enough level within the operating system (OS) on 
1 0 client system 210, CCM 300 can detect particular applications and when they request media storage 
device drive 1 1 12 to poll the media file for copying, ripping, etc., and disable the data input path. CCM 
300, in this embodiment, deals with the input pathway. 

In one embodiment, alternative applications that monitor the state of client computer system 210 
1 5 can enable the autorun functionality of client computer system 21 0 or alternatively, invoke an automatic 
mechanism similar to autorun to ensure invocation of CCM 300 for compliance of copyright restrictions 
and/or licensing agreements applicable to media storage device 999 and/or the copyright protected 
media disposed thereon. 

20 In one embodiment, CCM 300 can invoke a proprietary media player from media storage device 

999, or activate a proprietary media player resident and operable on client computer system 210, or an 
alternative authorized media player resident on client computer system 210, in a manner similar to that 
described herein with reference to Figure 3. 

25 When media storage device 999 is a multisession device, e.g., a compact disk having a data 

session and a music session (audio tracks), and it is coupled to media storage device drive 1112, CCM 
300 views the contents of the media storage device 999, and in some operating systems the audio tracks 
will not be displayed. Instead, the data session is shown, as is an autorun file (e.g., autorun protocol 
component 910), and upon clicking, invokes a player application. CCM 300 can have a data session and 

30 files to which a user may not have access unless a player application is invoked. 

In one embodiment, the player application could deposit a monitoring portion (e.g., agent 
program 304) on client system 210, which in one embodiment may reside on client computer system 210 
subsequent to removal (or uncoupling) of media storage device 999 from media storage device drive 
35 1112. 
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By virtue of content in a multisession media storage device 999, which may not be directly 
accessible to most player applications, the player application can be invoked which can then install the 
CCM 300 into client system 210, according to one embodiment of the present invention. 

5 In one embodiment, a proprietary media player application is stored on media storage device 999. 

However, it may not be automatically invoked. Upon some user intervention, e.g., inserting media 
storage device 999 into media storage device drive 1112, the media player application is loaded onto 
client system 210 which has CCM 300 integrated therewith. Thus, CCM 300 is launched regardless of 
autorun being activated or deactivated, and mandates the user to utilize the proprietary media player 
1 0 application to experience the content of the media (e.g., media files) on the media storage device 999. 

In an alternative embodiment, client computer system 210 has autorun turned off, wherein it is 
common for the user to be unable to play a media file unless a proprietary media player application is 
invoked. Activating the proprietary media player application can initiate an installation of those 
1 5 components of CCM 300 that are bypassed when autorun is not active. 

Advantageously, by providing a copyright compliance mechanism (e.g., 300) which can be easily 
and readily installed on a client computer system (e.g., 210), one or more embodiments of the present 
invention can be implemented to control access to, the delivery of, and the user's experience with media 
20 content subject to copyright restrictions and/or licensing agreements, for example, as defined by the 

DMCA. Additionally, by closely associating a client computer system (e.g., 210) with the user thereof and 
the media content received, embodiments of the present invention can provide for accurate royalty 
recording. 

25 Figure 12 is a block diagram of a usage compliance mechanism 1200, an alternative version of 

copyright compliance mechanism 300 which is configured to be disposed on a media storage device 
(e.g., 999 of Figures 10, 11, 13, 14, and 15) in accordance with an embodiment of the present invention. 
It is noted that CCM 300 of usage compliance mechanism 1200 is similar to CCM 300 as described herein 
with reference to Figures 3, 4, 5A-5D, 6A, 7A-7C, 8, 9, 10, and 11. Further, usage compliance 

30 mechanism 1200 can be readily updated in accordance with global delivery system 800 in a manner similar 
to that described herein with reference to Figures 7A-7C, and 8. 

In one embodiment, usage compliance mechanism 1200 can be disposed on a media storage 
device (e.g., 999). Content disposed thereon can, in one embodiment, be demonstration and/or pre- 
35 release content. Examples of demonstration and/or pre-release content can include, but is not limited to, 
audio, video, multimedia, graphics, information, data, software programs, etc. More specifically, 
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demonstration and/or pre-release content can contain, but is not limited to, digital movies or music that 
may be distributed to persons in the related media field for review (e.g., a motion picture academy member 
for their review of a movie, a record industry critic to review songs that may be released on a new compact 
disc, etc.). Alternatively, demonstration and/or pre-release content can also contain, but is not limited to, a 
5 beta version of a software program, and the like. 

Alternatively, the content disposed on media storage device 999 can, in another embodiment, be 
a commercial release of audio content, video content, software application, etc. Embodiments of the 
present invention are well suited to be implemented in a commercial environment, e.g., public 
1 0 presentation systems such as those in movie theaters, auditoriums, arenas and the like. Additionally, 

embodiments of the present invention are readily adaptable to be implemented in commercial distribution 
points, e.g., audio, video, and/or software retail and/or rental establishments, as well as for pay-per-view 
and/or pay-per-play implementations. 

1 5 Further, literary works, documents, graphics such as pictures, painting, drawing, and the like can 

comprise the content on media storage device 999. It is noted that a nearly endless variety of 
demonstration, pre-release, and/or commercially released content can be disposed on media storage 
device 999. 

20 Referring to Figure 12, usage compliance mechanism (UCM) 1200 includes an autorun protocol 

910 for invoking installation of components of UCM 1200 on a client computer system (e.g., 210), in one 
embodiment of the present invention. Autorun protocol 910 of Figure 12 is analogous to autorun 
protocol 910 of Figure 9. Also included in UCM 1200 is a file system filter driver 1220, in one embodiment 
of the present invention. 

25 

File system filter driver 1220 can, in one embodiment, be an upper level and/or lower level filter for 
the individual bus devices within client computer system 210, e.g., media storage device drive 1112 of 
Figures 10, 1 1 , 13, 14, and 15. File system filter driver 1220 is enabled to hook onto access to a media 
storage device drive 1112 (e.g., a CD drive) and intercept data reads associated with accessing the 
30 content on media storage device 999. 

In one embodiment of the present invention, file system filter driver 1220 includes a decrypter 
1221 for providing decryption of encryptions applied to encrypted content (e.g., encryptions 2351-2355 
applied to encryptions 1351-1355 of media content 2001-2005 of Figure 13). Decrypter 1221 can 
35 provide dynamic decryption of encryptions applied to encrypted media content on a media storage device 
999 as the content (e.g., 2001 -2005) is accessed and read by media storage device drive 1112. 
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Still referring to Figure 12, UCM 1200 also includes a secure media player 1210. Secure media 
player 1210 can be, in one embodiment, similar to custom media device 310 that is an emulation of the 
custom media device driver 307, as described herein with reference to Figures 3 and 5B-5D. 
5 Alternatively, secure media player 1210 may be an alternative media player having controlling properties 
analogous to custom media device 310. Secure media player 1210 includes a decrypter 121 1 for 
decrypting encryption applied to each instance of media disposed on a media storage device 999 (e.g., 
encryptions 1351-1355 applied to media content 2001-2005 of Figure 13, respectively). Secure media 
player 1210 also includes a watermarker 1212 for watermarking the outgoing data stream. In one 
1 0 embodiment, watermarker 1212 operates concurrent with secure media player 1 21 0 and during player 
1210's rendering of the content. For example, watermarker 1212 can attach a unique identifier (e.g., 
1380 of Figure 13) associated with each media storage device 999 onto the outgoing data stream. 

Figure 13 is a block diagram of contents and components that may be disposed on a media 
1 5 storage device (e.g., 999) in accordance with embodiments of the present invention. Media storage 
device 999 is shown with multiple instances of content (e.g. 2001-2005) disposed thereon. It is noted 
that any number of instances of media content can be disposed on media storage device 999. For 
example, a number greater than or fewer than the media content 2001-2005 shown can be disposed on 
media storage device 999. Media content 2001-2005 may be, but are not limited to, movies, audio tracks, 
20 software, beta software, documents, literary works, etc. It is noted that any digital media can be disposed 
on media storage device 999 or on a plurality of media storage devices 999. 

Media storage device 999 of Figure 13 is analogous to media storage device 999 of Figures 10, 
11,14, and 15. In one embodiment of the present invention, media storage device 999 is configured for 
25 utilization in conjunction with demonstration and/or pre-release content. 

Media storage device 999 of Figure 13 is shown to have disposed thereon a UCM (usage 
compliance mechanism) 1200 for controlling presentation of content (e.g., media content 2001-2005) 
disposed on media storage device 999. The UCM 1200 described herein with reference to Figures 13, 
30 14, and 15 is analogous to the UCM 1200 described herein with reference to Figure 12. It is noted that 
autorun protocol 910 of UCM 1200 is, in one embodiment, disposed on media storage device 999 in a 
non-encrypted format. 

Also shown on media storage device 999 is a unique identifier 1380 for providing a unique 
35 identification of media storage device 999, in one embodiment of the present invention. The unique 

identifier 1380 may be, but is not limited to, nearly any distinguishable identifying type of indicator, e.g., a 
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serial number, a randomly generated number, a sequential number, a combination of numbers and 
alphanumeric characters, and the like. It is noted that unique identifier 1380 can be generated prior to or 
during disposition of the media content (e.g., 2001-2005) on media storage device 999. 

5 Advantageously, by disposing unique identifier 1380 on a media storage device 999, it enables 

close association of the content disposed thereon (e.g., media content 2001-2005) with the anticipated 
recipient (e.g., a movie critic, a music critic, an academy award member, a software beta tester, etc.) of the 
media storage device. Therefore, by closely associating a media storage device (e.g., 999) with an 
anticipated recipient (e.g., the user of computer system 210), embodiments of the present invention can 
1 0 prevent unauthorized persons from experiencing content on a media storage device, as described herein 
with reference to Figures 3, 4, 7A-7C, and 8. 

Further advantageous is that by having unique identifier 1380 for each media storage device 999, 
embodiments also provide security at the media storage device mastering level. This means that an 

1 5 employee working at a mastering facility who dishonestly and/or unlawfully takes a copy of the media 

storage device is prevented from copying the contents and turning it into bootleg (unauthorized versions) 
copies of the media storage device in an attempt to flood the market. Specifically, by virtue of each media 
storage device 999 having unique identifier 1380, and each media storage device 999 is associated with 
its intended recipient, persons not associated with a particular media storage device 999 are unable to 

20 experience the content thereon. It is noted that while the market may still be flooded with bootleg copies, 
those that acquire a bootleg copy of a media storage device 999, in accordance with the present 
invention, will not be able to experience the content thereon, thereby possibly causing the public to be 
less receptive to the idea of an inexpensive bootleg copy of something that they cannot use. 

25 In one embodiment, media storage device 999 may be distributed to its intended recipients in a 

variety of ways. For example, distribution of media storage device 999 to its intended recipients can 
include, but is not limited to, postal delivery methods, e.g., the United States Postal Sen/ice, parcel 
delivery services such UPS (United Parcel Service) and/or Federal Express, courier delivery services, and 
the like. In another embodiment, the intended recipient of a media storage device 999 may be required to 

30 physically pick up device 999 from a distribution point. 

Media storage device 999 can include multiple instances of content (e.g., media content 2001- 
2005) in one embodiment of the present invention. Media content 2001-2005 can be any type of digital 
media content, including, but not limited to, audio, video, multimedia, graphics, information, data, software 
35 programs, etc. 
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Still referring to Figure 13, in one embodiment of the present invention, each instance of media 
content (e.g., 2001-2005) is subject to a first encryption (e.g., encryptions 1351-1355), respectively. In 
one embodiment, a first decryption key for each encryption (e.g., encryptions 1351-1355) may be stored 
in a server (e.g., web server 250 and/or content server 251 of Figures 2, 4, 10, and 14). In one 
5 embodiment, secure media player 1210 can utilize decrypter 121 1 and the decryption key stored on web 
server 250 and/or content server 251 to decrypt encryptions 1351-1355 during rendering of the content. 
It is noted that secure media player 1210 can be communicatively coupled with web server 250 and/or 
content server 251 during rendering and presentation of the content disposed on media storage device 
999. 

10 

Additionally, media content (e.g., 2001-2005) having a first encryption applied thereto (e.g., 
encryptions 1351-1355) can each be subject to a second encryption (e.g., encryptions 2351-2355), 
respectively, prior to disposal of media content 2001-2005 on media storage device 999. In one 
embodiment, a second decryption key to decrypt encryptions 2351-2355 may be stored in a server (e.g., 

1 5 web server 250 and/or content server 251 of Figures 2, 4, 10, and 1 4). In one embodiment, file system 
filter driver 1220 can utilize decrypter 1221 and the second decryption key stored on web server 250 
and/or content server 251 to decrypt encryptions 2351-2355 during the reading of the content on media 
storage device 999 by media storage device drive 1112. It is noted that file system filter driver 1220 can 
be communicatively coupled with web server 250 and/or content server 251 during rendering and 

20 presentation. 

In one embodiment, encryptions 1351-1355 can be less computationally intensive encryptions 
when compared to encryptions 2351-2355. Alternatively, in one embodiment, encryptions 1351-1355 
can be more computationally intensive when compared to encryptions 2351-2355. 

25 

There are many available encryption methods that can be implemented as encryptions 1351- 
1355 and/or encryptions 2351-2355. Examples of encryptions that may be implemented for encryptions 
1351-1355 and/or 2351-2355 can include, but are not limited to, Triple Data Encryption Standard 
(TripleDES), Advanced Encryption Standard (AES), Blowfish, and numerous others. In one embodiment, 
30 encryptions 1 351 -1 355 and/or 2351 -2355 can each be comprised of a series and/or a mixture of 
encryptions. A differing encryption (e.g., a plurality of randomly generated encryptions) can be 
implemented for each instance of media on a media storage device (e.g., 999), rather than using one 
format. In one embodiment, numerous variations of Blowfish can be utilized to provide the desired 
encryptions. 

35 
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It is noted that when the media (e.g., 2001) of media storage device 999 is encrypted utilizing 
multiple different encryptions (e.g., 1351 and 2351), the media is more secure against those with 
dishonest and/or unlawful interests. For example, a person/hacker may attempt to gain access to the 
content by breaking the second encryption (e.g., 2351) applied to a media content (e.g., 2001). 
5 However, if they are successful, the remaining encryption (e.g., 1351) remains unbroken by virtue of the 
differing encryptions. Therefore, the person/hacker would have to perform the entire encryption breaking 
process again to access media content 2001 on media storage device 999. Thus, after spending non- 
trivial amounts of time breaking two differing encryptions applied to an instance of media (e.g., 2001) the 
remaining content on media storage device 999 can still be encrypted, each with its own differing multiple 
1 0 encryption. 

Figure 14 is a block diagram of a communicative environment 1400 for controlling presentation of 
media content disposed on a media storage device. Included in communicative environment 1400 is a 
media storage device drive 1112 coupled with a client computer system 210 via a data/address bus 110. 

1 5 Client computer system 210 is coupled with web server 250 and/or content server 251 via Internet 201 . A 
media storage device 999, upon which a usage compliance mechanism 1200 may be disposed, is 
received by media storage device drive 1112. Autorun protocol component 910 detects the reception 
and automatically invokes installation of CCM 300, file system filter driver 1220, and secure media player 
1210 from media storage device 999 into client computer system 210. Subsequent to installation, UCM 

20 1 200 initiates a dynamic update with web server 250 and/or content server 251 , via Internet 201 , as 
described herein with reference to Figures 3, 4, and 7A-7C, thereby controlling the integrity of the 
software. Additionally, by conferring with servers 250 and/or 251 via Internet 201 online, the UCM 1200 
software version on media storage device 999 and installed on client computer system 210 can be 
updated when circumventions occur and kept current from platform to platform. 

25 

Advantageously, the monitoring mechanism of agent program 304 enables constant morphing of 
the version of CCM 300 disposed on media storage device 999 by communicating with server 250 and/or 
251 and utilizing the dynamic update capabilities of global network 800 to readily update that which has 
been installed on client computer system 210, via media storage device 999. 

30 

In one embodiment, the installation is performed clandestine with respect to the recipient of 
media storage device 999 and is initiated by inserting media storage device 999 into an appropriate media 
storage device drive (e.g. a magnetic/optical disk drive or alternative device drive) coupled with client 
system 210. Portions of UCM 1200 determine if the recipient is registered with web server 250 and/or 
35 content server 251 . If the recipient is not registered with servers 250 and/or 251 , as described herein with 



MOMI-006 



CONFIDENTIAL 



reference to Figure 4 and Figures 7A-7C, and Figure 8, portions of UCM 1200 initiates an installation 
process as described herein with reference to Figures 3, 4, 7A-7C, and 1 1 . 

If computer system 210 is registered with servers 250 and/or 251 , UCM 1200 can initiate an 
5 update process with web server 250 and/or content server 251 to readily include updates that have been 
invoked subsequent to distribution of media storage device 999. By virtue of the dynamic update 
capabilities of UCM 300, regardless of the version of CCM 300 on media storage device 999, UCM 1200 
provides compliance with copyright restrictions and/or licensing agreements applicable to the media 
content (e.g., 2001-2005) on media storage device 999. Advantageously, enabling dynamic adaptability 
10 of UCM 1 200 provides for continued interoperability with new and updated operating systems, 
advancements in electronic technology, communication technologies and protocols, and the like, 
ensuring the effectiveness of UCM 1200 into the future. 

In another embodiment, if the user is a registered user with global delivery system 800, UCM 1200 
1 5 can detect which version is most current. Accordingly, when the version existing on client system 210 is 
more current that the version (for install) on media storage device 999, UCM 1200 can bypass the install 
process and present the contents contained on media storage device 999 to the user for them to 
experience. 

20 Further advantageous, this technology is backward compatible with media storage device drives 

manufactured subsequent to 1982. Additionally, UCM 1200 is compatible with media storage devices 
having a copyright indicator bit disposed thereon. The copyright indicator bit has been included on all 
CDs released since 1982. 

25 In the present embodiment of Figure 14, each instance of media is encrypted on media storage 

device 999, as described herein with reference to Figure 13. However, most home players and/or stand 
alone media playing devices rarely include a decryption mechanism. As such, to experience the music on 
a home machine, the music is conventionally not encrypted. Accordingly, media storage device 999, in its 
present embodiment, may not be operable on a home and/or stand alone media playing device. 

30 

In one embodiment, UCM 1200 can invoke its own proprietary player (e.g., secure media player 
1210) as described with reference to custom media device 310 of Figure 3, thus enabling increased 
control of copyright restrictions and/or licensing agreements applicable to the media content. By invoking 
a secure media player 1210, UCM 1200 enables user experience of media content while providing 
35 protection against unauthorized presentation or reproduction of the media disposed on media storage 
device 999. 
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Still referring to Figure 14, in one embodiment, the media content (e.g., 2001-2005) and UCM 
1200 disposed on a media storage device 999 are encrypted, with the exception of autorun protocol 910, 
as described above. In one embodiment of the present invention, UCM 1200 is encrypted differently 
5 than media content 2001-2005, thereby preventing the cracking of one encryption from being utilized on 
another encryption. This implementation is particularly advantageous for demonstration (demo) versions 
of media files, beta test versions, and the like that may be disposed on media storage device 999. It is 
noted that the present embodiment is operable in an online environment, meaning that client computer 
system 210 can be communicatively coupled with web server 250 and/or content server 251 to enable a 
1 0 user experience of the content on a demo version of media storage device 999. In this implementation, 
UCM 1200 allows for specific plays for specific users, which can be controlled via a network (e.g., 1400) 
and server 250 and/or 251 . 

In the present embodiment, UCM 1200 can be implemented for demonstration and/or pre-release 
1 5 protection of content disposed on a media storage device 999. However, content disposed on media 
storage device 999 can also be commercially released content (e.g., audio, video, software, and the like). 
In this embodiment, sophisticated encryption technology (e.g., Blowfish) is utilized to encrypt media 
content (e.g., 2001-2005) on media storage device 999 with an associated decrypter key located on web 
server 250 and/or content server 251 . In one embodiment, a plurality of encryptions are applied to media 
20 content 2001-2005 and a plurality of decrypter keys are stored on web server 250 and/or content server 
251 . Decryption can be performed using an associated decryption key in conjunction with a secure media 
player 1210 and file system filter driver 1220 installed on computer system 210 via media storage device 
999. 

25 Still with reference to Figure 14, the content (e.g., 2001-2005) of media storage device 999 is 

encrypted, using various levels of encryption to provide protection levels commensurate with copyright 
holders desires and required protection. For example, media storage device 999 is delivered to a user or 
critic for the purposes of review. The user inserts media storage device 999 into the appropriate storage 
device reader or connector coupled with the recipient's computer, and autorun protocol 910 initiates UCM 

30 1 200 install of CCM 300, file system filter driver 1 220, secure media player 1 21 0 on client system 21 0 in a 
manner clandestine to the user. Once installed, UCM 1200 initiates a communication session with web 
server 250/content server 251 , where content server 251 can provide authorization for the user to 
experience the media on media storage device 999. 

35 Accordingly, if the user, to whom demo media storage device 999 had been released, had demo 

media storage device 999 stolen, or if the user allowed alternative parties to try to experience the content 
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of media storage device 999, the unauthorized party would have to try to crack the encryption keys and 
the encryption of the actual content of media storage device 999, consuming non-trivial amounts of time. 

Thus, UCM 1200 is able to control which recipients receive authorization to experience the media 
5 content on media storage device 999, how many times the recipient may experience the media, and UCM 
1200 may also define a period of time beyond which the media content may no longer be accessible. This 
may enable copyright holders to release the media content on an authorized media storage device (e.g., 
999) prior to pirated copies flooding the market. 

1 0 Still referring to Figure 14, accordingly, a media storage device 999 may be configured such that a 

first user may get a copy, a second user may get a copy, and if it is known that the second user will share 
the demo with a third and a fourth user, then the known users would be enabled to experience the media. 
Advantageously, by virtue of defining which users can access and experience the media, any 
unauthorized sharing of the media by one of the authorized users can be readily detected, and further 

1 5 sharing or experiencing of the media may be halted. Additionally, since the authorized user shared the 
media in an unauthorized manner, in a worse case scenario, criminal charges could be filed against that 
user. 

It is noted that by including UCM 1200 on a media storage device (e.g., 999) so as to enable 
20 installation of CCM 300 on client system 210 is one manner in which CCM 300 can be installed on client 
system 210. An alternative manner in which CCM 300 can be installed on client computer system 210 is 
through "cross-pollination." For example, webcasters broadcast the media file to the user. The media file 
has a CCM 300 coupled with the media file, and upon downloading the media file onto client computer 
system 210, embodiments of the present invention enable the installation of CCM 300 onto client 
25 computer system 210. In another manner, CCM 300 is incorporated into and becomes part of an 
operating system operational on client system 210. Alternatively, laws are passed that mandate the 
inclusion of CCM 300 on each client computer system 210. 

Figure 15 is an exemplary logic/bit path block diagram 1500 of a client computer system (e.g., 
30 210) configured with a usage compliance mechanism (e.g., 1200) for controlling presentation of content 
on a media storage device (e.g., 999), in accordance with one embodiment of the present invention. It is 
noted that usage compliance mechanism 1200 of Figure 15 is analogous to usage compliance 
mechanism 1200 of Figure 12. Therefore, CCM 300 of usage compliance mechanism 1200 is analogous 
to a copyright compliance mechanism 300 coupled with and installed on a client computer system (e.g., 
35 210) as described herein with reference to Figures 3, 4, 5A-5D, 6A, 7A-7C, 8, 9, 10, 11 14, 15, and 16. 



MOMI-006 



CONFIDENTIAL 



Diagram 1500 includes a media storage device drive (e.g., 1112) coupled with a media storage 
device file system driver 1 1 14 via line 1571 . Media storage device drive file system driver 1114 enables 
an operating system (e.g., Windows OS, Apple OS, Linux OS, etc.) of a client computer system (e.g., 
210) to recognize and control the media storage device drive 1112. Coupled to media storage device 
5 drive file system driver 1 1 14 is file system filter driver 1220, via line 1572. Coupled to file system filter 
driver 1220 is a secure media player 1210 via line 1573. Coupled with secure media player 1210 are an 
operating system media subsystem 503 via line 1577 and a media hardware output device 1370 via line 
1574. It is noted that media hardware output device 1370 includes an output 1575 from which media 
content can be output. UCM 1200 is coupled with operating system media subsystem 503 via line 1576. 

10 

Media storage device drive 1 1 1 2 of Figure 1 5 is analogous to media storage device drive 1 1 1 2 of 
Figures 1 1 and 14. Media storage device drive 1 1 12 is configured to receive media storage device 999. 
In one embodiment, drive 1112 may be a CD drive and accordingly, media storage device 999 would be a 
CD. In another embodiment, drive 1112 may be a DVD drive and media storage device 999 would be a 
1 5 DVD, and so on. Therefore, media storage device drive 1112 can, when so configured, receive any 
media storage device 999 upon which data or content may be disposed. 

File system filter driver 1220 can be an upper level and/or lower level filter for individual bus 
devices (e.g., media storage device drive 1 1 12) of client computer system 210 and is analogous to file 

20 system filter driver 1 220 of Figure 1 2. File system filter driver 1 220 is able to hook onto access of media 
storage device drive 1112 (e.g., a CD drive) and intercept data reads associated with accessing the 
content (e.g., 2001-2005) of media storage device 999. File system filter driver 1220 is also enabled, via 
decrypter 1221 and a decrypter key on servers 250 and/or 251 , to provide dynamic decryption of 
encrypted media content on media storage device 999 as the content is accessed and read by media 

25 storage device drive 1112. 

By virtue of file system filter driver 1220 operating at a file system level instead of operating at a 
device drive class level (e.g., a CD class level), it is able to recognize which files are being accessed from 
media storage device 999 for a particular operation. Advantageously, this obviates the need for a file 
30 system to be implemented within a driver for determining whether data that is being read needs 
decrypting. 

Still referring to Figure 15, secure media player 1210 is analogous to secure media player 1210 of 
Figure 11. Secure media player 1210 can, in one embodiment, be a custom media device 310 that 
35 emulates a custom media device driver 307, as described herein with reference to Figure 3. In another 
embodiment, secure media player 1210 can be a proprietary player configured for utilization with 
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demonstration and/or pre-release content (e.g., 2001-2005) disposed on a media storage device (e.g., 
999). Other authorized media players may also be used to present media content of media storage device 
999, provided the other media players can comply with usage restrictions and/or licensing agreements 
applicable to the media content and provided by secure media player 1210. 

5 

Media hardware output device 1370 is an appropriate output device for the media content of 
media storage device 999. If media content 2001-2005 are audio tracks or songs, then output device 
1370 is an audio or sound card for outputting music via speakers. Alternatively, if media content 2001 - 
2005 are video tracks, movies, literary works, software programs, etc., then output device 1370 is a 
1 0 graphics card for outputting movies, text, and the like via a display device (e.g., 105 of Figure 1). 

Continuing with Figure 15, media storage device 999 is received by media storage device drive 
1112. Autorun protocol 910 initiates a process to determine the presence of a usage compliance 
mechanism (e.g., 1200) and a secure media player (e.g., 1210) operable on computer system 210. If 
1 5 either and/or both usage compliance mechanism 1200 and secure media player 121 0 are not present on 
computer system 210, autorun protocol 910 initiates installation of the components, as described herein 
with reference to Figures 3, 4, 5A-5D, 6, 7A-7C, and 8-16. If UCM 1200 and secure media player 1210 are 
both present, autorun 910 bypasses the installation thereof. Media storage device file system driver 1114 
accesses the content (e.g., 2001-2005) on media storage device 999 and reads the data. 

20 

File system filter driver 1220 intercepts the read operation being performed by driver 1 1 14 and 
dynamically decrypts a second encryption (e.g., encryptions 2351-2355) applied to media content 2001- 
2005 via decrypter 1221 and a second decryption key stored on and retrieved from servers 250 and/or 
251 . In one embodiment, if file system filter driver 1220 is not communicatively coupled with server 250 
25 and/or 251 thereby enabling retrieval of the second decryption key, presentation of the content of media 
storage device 999 is not permitted. 

Continuing with Figure 15, subsequent to the second encryptions 2351-2355 being decrypted, 
media content 2001-2005 which is still encrypted with a first encryption (e.g., encryptions 1351-1355, 
30 respectively) is output to secure media player 1210 via line 1573. Secure media player 1210 in 

conjunction with UCM 1200 communicates with server 250 and/or 251 and determines if computer 
system 210 and the user thereof, are authorized to experience media content 2001-2005. If system 210 
and the user thereof are authorized to experience media content 2001-2005, secure media player 1210 
commences to render the media content for presentation via media hardware output device 1370. 

35 
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Concurrent with rendering media content 2001-2005, secure media player 1210 can, in one 
embodiment, communicate with server 250 and/or 251 and retrieve the decryption key associated with 
each encryption (e.g., 1351-1355) and with decrypter 1211 of Figure 12 in order to dynamically decrypt 
each instance of media (e.g., 2001-2005) as the content is being rendered and output via line 1574 to 
5 media hardware output device 1370. 

Because rendered content is vulnerable to capture and/or imaging, and thus becoming subject to 
ripping, burning, copying, and the like, secure media player 1210 can watermark (e.g., via watermarker 
1212) the outgoing data stream that is output to media hardware output device 1370 via line 1574. In one 

1 0 embodiment, utilizing watermarker 1212, the outgoing data stream is watermarked concurrent with the 
rendering performed by secure media player 1210. Further, secure media player 1210 can attach a 
unique identifier (e.g., 1380) with each rendered media content (e.g., 2001-2005). In one embodiment, 
the unique identifier 1380 is a serial number that is attached to each media content (e.g., 2001-2005) as it 
is being rendered and output to media hardware output device 1370. In this manner, if the rendered 

1 5 content being output is somehow captured, imaged, etc., by virtue of the association of unique identifier 
1380 (e.g., serial number) with media storage device 999 and the media content disposed thereon (e.g., 
2001-2005) and computer system 210 with which the recipient of media storage device 999 is associated, 
unauthorized presentation and reproduction of the media content is prevented. 

20 Figure 16 is a flowchart 1600 of computer implemented operations performed in accordance with 

one embodiment of the present invention for controlling presentation of media content disposed on a 
media storage device. Flowchart 1600 includes processes of the present invention which, in some 
embodiments, are carried out by processors and electrical components under control of computer 
readable and computer executable instructions. The computer readable and computer executable 

25 instructions reside, for example, in data storage features such as computer usable volatile memory 104 
and/or computer usable non-volatile memory 103 of Figure 1 . However, the computer readable and 
computer executable instructions may reside in any type of computer readable medium. Although 
specific operations are disclosed in flowchart 1600, such operations are exemplary. That is, the present 
embodiment is well suited to performing various other operations or variations of the operations recited in 

30 Figure 16. Within the present embodiment, it should be appreciated that the operations of flowchart 1600 
may be performed by software, by firmware, by hardware or by any combination thereof. 

It is noted that flowchart 1600 is described in conjunction with Figures 2, 3, 4, 5A-5D, 6, 7A-7C, 
and 8-15 to more fully describe the operation of the present embodiment. At operation 1610, an autorun 
35 mechanism (e.g., autorun protocol 910) disposed on a media storage device (e.g., 999) is activated in 
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response to a computer system (e.g., 210) receiving the media storage device in an appropriate device 
drive (e.g., media storage device drive 1112). 

At operation 1612 of Figure 16, a monitoring program (e.g., of UCM 1200) disposed on media 
5 storage device 999 determines if a usage compliance mechanism (e.g., UCM 1200) is installed on the 
computer system (e.g., 210) which received media storage device 999. In one embodiment, agent 
programs 304 may perform the determination at operation 1612. However, in another embodiment, 
combinations of components of a CCM 300, as described herein with reference to Figure 3, 4, 7A-7C may 
be utilized to perform the determination at operation 1612. If a usage compliance mechanism is not 
1 0 present on computer system 210 at operation 1612, process 1600 proceeds to operation 161 1 . 

Alternatively, if a usage compliance mechanism is present on computer system 210 at operation 1612, the 
process 1600 proceeds to operation 1614. 

At operation 161 1 , a usage compliance mechanism can be installed on computer system 210. It is 
1 5 noted that the installation of the usage compliance mechanism on computer system 210 at operation 
161 1 may be performed in a wide variety of ways in accordance with the present embodiment. For 
example, the installation can be implemented at operation 1611 as described herein with reference to 
, Figures 3, 4, 5A-5D, 6, 7A-7C, and 8-15, but is not limited to such. 

20 In operation 1614, a monitoring mechanism (e.g., of UCM 1200) disposed on media storage 

device 999 determines if a secure media player (e.g., 1210) is present and operable on computer system 
210. In one embodiment, agent program 304 of CCM 300 of Figure 3 can perform the determination at 
operation 1614. If a secure media player (e.g., 1210) is not present and operable on computer system 
210 at operation 1614, the present method proceeds to operation 1611. Alternatively, if a secure media 

25 player (e.g., 1210) is present and operable on computer system 210 at operation 1614, the present 
method proceeds to operation 1616. 

At operation 1611 of Figure 16, a secure media player (e.g., 1210) can be installed on computer 
system 210. It is noted that the installation of the secure media player on computer system 210 at 
30 operation 161 1 may be performed in diverse ways in accordance with the present embodiment. For 
example, the installation can be implemented at operation 1611 as described herein with reference to 
Figures 3, 4, 5A-5D, 6, 7A-7C, and 8-15, but is not limited to such. 

At operation 1613, a determination is made as to whether the installation (e.g., of a usage 
35 compliance mechanism and/or a secure media player) at operation 161 1 was successful. If so, process 
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1600 proceeds to operation 1616. However, if it was determined at operation 1613 that the installation at 
operation 1611 was not successful, process 1600 proceeds to operation 1615. 



At operation 1616, a determination is made as to whether computer system 210 and the user 
5 thereof are authorized to experience media content (e.g., 2001-2005) of media storage device 999. It is 
noted that the determination at operation 1616 may be performed in a wide variety of ways in accordance 
with the present embodiment. For example, the usage compliance mechanism (e.g., 1200) can 
communicate with servers 250 and/or 251 in networks 200, 400, 1000, and/or 1400 to determine 
whether computer system 210 and its user are authorized to experience media content (e.g., 2001-2005) 
10 on media storage device 999, as described herein with reference to Figures 3, 4, operations 704-708 of 
Figure 7A and 8-1 5, but is not limited to such. If computer system 210 and its user are not authorized to 
experience the content on media storage device 999 at operation 1616, process 1600 proceeds to 
operation 1615. Alternatively, if computer system 210 and the user thereof are authorized to experience 
the content on media storage device 999 at operation 1616, process 1600 proceeds to operation 1618. 

15 

At operation 1618 of Figure 16, a determination is made (e.g., by UCM 1200) as to whether 
secure media player 1210, usage compliance mechanism 1200 and computer system 210 are all 
communicatively coupled with a network (e.g., 200, 400, 800, 1000, and/or 1400) in accordance with the 
present embodiment. If one or more of the conditions are not met at operation 1618, the present method 
20 proceeds to operation 1615. Alternatively, if secure media player 1210, usage compliance mechanism 
1200, and computer system 210 are all communicatively coupled with the network (200, 400, 800, 1000, 
and/or 1400) at operation 1618, the present method proceeds to operation 1620. 

At operation 1615, the presentation of the content (e.g., 2001-2005) of media storage device 
25 999 to the user of computer system 210 is prevented from occurring. Alternatively, computer system 210 
and its user may communicate with the network (e.g., 200, 400, 800, 1000, and/or 1400) and attempt to 
establish credentials and/or to re-establish a communicative coupling with the network, that would allow 
presentation of the content, as described herein with reference to Figure 3, 4, and operations 704-708 of 
Figure 7A. 

30 

At operation 1622, the session is ended. 

At operation 1620 of Figure 16, the media content (e.g., 2001-2005) of media storage device can 
be presented to the user of computer system 210. It is noted that operation 1620 can be implemented in 
35 a wide variety of ways in accordance with the present embodiment. For example, the media content (e.g., 
2001-2005) on media storage device 999 can be read by media storage device drive 1112. File system 
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filter driver 1220 can intercept the read operation being performed by media storage device file system 
driver 1114 and dynamically decrypts a second encryption (e.g., 2351-2355) applied to media content via 
decrypter 1221 and a second decryption key stored on and retrieved from servers 250 and/or 251. Within 
one embodiment, if file system filter driver 1220 is not communicatively coupled with server 250 and/or 
5 251, enabling retrieval of the second decryption key, presentation of the content on media storage 
device 999 is not permitted. 

Continuing with an exemplary implementation of operation 1620, subsequent to a second 
encryption (e.g., 2351-2355) being decrypted, the media content (e.g., 2001-2005) which is still 
1 0 encrypted with a first encryption (e.g., 1351-1355, respectively) is output to secure media player 1210. In 
one embodiment, secure media player 1210 in conjunction with UCM 1200 communicates with server 
250 and/or 251 and commences to render the media content for presentation via a media hardware 
output device (e.g., 1370). 

15 It is noted that concurrent with rendering media content (e.g., 2001-2005), secure media player 

1210 can, in one embodiment, communicate with server 250 and/or 251 and retrieve the decryption key 
associated with each encryption (e.g., 1351-1355) and with decrypter 1211 of Figure 12 in order to 
dynamically decrypt each instance of media (e.g., 2001-2005) as the content is being rendered and 
output to media hardware output device 1370. 

20 

Since rendered content is vulnerable to capture and/or imaging, and thus becoming subject to 
ripping, burning, copying, and the like, secure media player 1210 can watermark (e.g., via watermarker 
1212) the outgoing data stream that is output to media hardware output device 1370. In one 
embodiment, the outgoing data stream is watermarked concurrent with the rendering performed by 

25 secure media player 1210. Further, secure media player 1210 attaches a unique identifier (e.g., 1380) 
with each rendered media content (e.g., 2001-2005). In one embodiment, a unique identifier 1380 (e.g., 
serial number) is attached to each media content (e.g., 2001-2005) as it is being rendered and output to 
media hardware output device 1370. In this manner, if the rendered content being output is somehow 
captured, imaged, etc., by virtue of the association of unique identifier 1380 with media storage device 

30 999 and the media content (e.g., 2001-2005) disposed thereon and the computer system 210 with which 
the recipient of media storage device 999 is associated, unauthorized presentation and reproduction of 
the media content is prevented. 

In another implementation, embodiments of the present invention can be utilized in a distributed 
35 network topology to control media sharing among computer systems within the network. Some of the 
distributed network topologies in which embodiments of the present invention can be utilized are, but is 
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not limited to, a centralized, a ring, a hierarchical, and a decentralized distributed topology. A 
decentralized distributed network topology is commonly referred to as a peer-to-peer (P2P) network. In a 
P2P network, each computer system/node in the network is able to communicate with any other computer 
system/node within the network. A computer system in a P2P network can request data from the network 
5 as well as provide data to the network. Thus, a computer system can be both a requesting computer 
system (requesting node) and a source computer system (source node) within a P2P network. 
Additionally, there may be a host server or a plurality of host servers present in the network that may be 
utilized alone or in combination with each other (e.g. as an administrative node, super node, etc.) to 
provide administrative functionalities to the computer systems there within and for providing content to 
1 0 the P2P network. 

It is known that many implementations of a distributed network topology (e.g., a decentralized 
topology) are not configured to adequately control and/or monitor the exchanging or trading of media 
among computer systems in the P2P network. Embodiments of the present invention provide a novel 
1 5 and inventive solution to this problem. 

Figure 17 is a block diagram of a network environment 1700 for sharing media content between 
nodes (e.g., computer systems) communicatively coupled therewith, in accordance with one embodiment 
of the present invention. Network 1700 includes a client node 1705, a source node 1715 and a 

20 administrative node 1770 which are communicatively coupled via communication link 1710. 

Communication link 1710 may be a wireline, wireless, or combination of wireline and wireless technologies 
and communication protocols that facilitate interaction between computer systems. Additionally, in the 
present embodiment, nodes 1705, 1715, and 1770 may each be implemented on one or more physical 
computer systems similar to computer system 100 as described herein with reference to Figure 1 . 

25 Alternatively, nodes 1705, 1715, and 1770 may all be implemented on a single physical computer system 
similar to computer system 100 described herein with reference to Figure 1 . Further, network 
environment 1700 may be implemented in a manner similar to that described herein with reference to 
network 200 of Figure 2 and network 800 of Figure 8. 

30 In one embodiment, client node 1705 may be implemented in a manner similar to client computer 

system 210 as described herein with reference to Figures 2, 4-8, 10, 11, 14, and 15. Source node 1715 
may, in one embodiment, be a client node that makes available to network 1700 media content that may 
be stored there within. In another embodiment, source node 1715 may be a media distribution point 
(MDP) as described herein with reference to Figure 8, configured to make available to network 1700 

35 media content that may be stored there within. By virtue of the functionality inherent to a P2P network, 
source node 1715 can function as a client node while client node 1705 can function as a source node. 
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Still referring to Figure 17, administrative node 1770 may, in one embodiment, be implemented in 
a manner similar to a web server 250 and/or content server 251 , as described herein with reference to 
Figures 2 and 4. As such, administrative node 1770 may also be coupled to a database, e.g., database 
5 450 and/or 451 of Figure 4. Accordingly, administrative node 1770 can, in one embodiment, be 

configured to provide management functionalities to a network, e.g., network 1700 or network 800 of 
Figure 8. Types of management functionalities that can be provided by administrative node 1770 can 
include, but is not limited to, network management, user management, encryption and decryption key 
management, authorization management, media management, transaction management, player 
1 0 application management, and cache management. Administrative node 1770 can also be implemented to 
function as source node 1715 and/or as a media delivery point as described herein with reference to 
Figure 8. 

Network management can include, but is not limited to, determining the route through which an 
1 5 instance of media is transferred to another computer system in network 1700. For example, and referring 
to Figure 8, an instance of media is located in plurality of locations within network 800, e.g., media delivery 
points 808 (San Jose), 816 (Tokyo), and 812 (New York City). Client node 1705 that can be located in 
Washington D.C. requests that particular instance of media content. Administrative node 1770 is able to 
determine, for this example, that the least amount of network resources needed to transfer the media 
20 content to requesting client node 1705 would be transferring the instance of media content from media 
delivery point 812 (New York City). 

It is anticipated that many instances of a particular instance of media may be disposed throughout 
the network (e.g., 1700) in which there may be varying degrees of quality among the instances of media 

25 content. Further, it is known that differing source nodes (e.g., 1715) can have varying rates of transfer. 
For example, a source node 1715' may be coupled to network 1700 via a digital subscriber line (DSL), 
whereas another source node 1715" may be coupled to network 1700 via 56K modem, which is 
substantially slower than a DSL connection. Additionally, transfer routes that would go through a network 
connection that may be experiencing downtime or technical difficulties can be rerouted. Advantageously, 

30 administrative node 1770 can incorporate quality of media content, connection health, and/or delivery 
speed information into its determination from which source node 1715 the instance of media is to be 
delivered. 

Still referring to Figure 17, user management can include in one embodiment, but is not limited to, 
35 maintaining and verifying current user information such as user name, password, billing address, valid 
credit card number, valid online payment or alternative electronic payment sen/ice, MAC (Media Access 
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Control) address, etc., as described herein with reference to Figures 3 and 4, and operations 704-710 of 
Figures 7A-7C. 

In one embodiment, encryption and decryption key management includes, but is not limited to, 
5 storing an encryption key associated with a client node (e.g., 1705) for use by the client node to encrypt 
media content thereon into an encryption local to that client node, managing a plurality of intermediate 
encryption and decryption keys for utilization with media content that is being transmitted to a client node, 
etc. 

10 In one embodiment, authorization management may include verifying that a client node 1705 is 

authorized to be coupled to network 1700, thus being associated with the network. Alternatively, 
authorization management may also include, but is not limited to, authorizing sharing of an instance of 
media with network 1700 that complies with copyright restrictions and/or licensing agreements applicable 
to the particular instance of media. Furthermore, authorization management may include, but is not limited 

1 5 to, prohibiting sharing of an instance of media with network 1700 that does not comply with copyright 
restrictions and/or licensing agreements applicable to the particular instance of media. 

Still referring to Figure 17, media management can include, but is not limited to, storing a list of 
available instances of media content and their associated location within network 1700, storing information 

20 related to each instance of media (e.g., title, artist, genre, length/duration of media content, bit pattern 
information related to a particular instance of media for identification, storing information regarding royalty 
fees, where applicable, that may be assessed to an instance of media content each time it is transmitted 
within the network), storing information to enable expiring the media content on a computer system when 
the computer system is no longer authorized to access and/or is no longer associated with network 1700, 

25 and the like. 

Additionally, media management can also include utilizing an Ethernet filter and other 
mechanisms to obtain information related to transmitted and/or received instances of media, instances of 
media that have recently entered the network, and the like. In one embodiment, an Ethernet filter may be 
30 coupled to a network interface device (e.g., 104) coupled to the computer system receiving the instance 
of media content. It is noted that the network interface may include, but is not limited to, a modem, a NIC 
(network interface card), a wireless receiver, etc. Information obtained by an Ethernet filter can be used in 
identifying a particular instance of media, determining appropriate royalty fees, etc. 

35 In one embodiment, transaction management can include generating a transaction for each 

successful transfer of media content from one node (e.g., source 1715) to another node (e.g., client 
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1705) in the network (e.g., 1700). In one embodiment, the receiving client node 1705 acknowledges 
successful receipt of the media content and accordingly, administrative node 1770 generates a 
transaction applicable to the receiving client node 1705 and which is associated with that particular 
instance of media. Since different instances of media content may have differing usage and/or royalty 
5 fees associated therewith, embodiments of the present invention can provide the mechanisms to account 
for each transfer such as generating a transaction for each transfer, generating a payment from the 
recipient of the instance of media, and/or delivering an appropriate remuneration to the media content 
copyright holder. 

1 0 Advantageously, a royalty transaction can also be applied to a copyrighted instance of media 

where no royalty payment was previously possible. For example, assume that a bootleg copy of an artist's 
live performance has been freely available for years. This bootleg copy may have been made from a 
portable recorder brought to a live performance and was used to record the performance. In this example, 
a person acquires an analog bootleg copy and converts it to a digital format or acquires a digital format of 

1 5 the bootleg copy. The digital copy is then availed to network 1700 for sharing among the computer 
system coupled therewith. It is noted that when an instance of media enters network 1700, it becomes 
protected as described herein with reference to Figures 3, 4-9, 11,12, and 15. 



Accordingly, when client node 1705 successfully receives the digital copy, a transaction is 
20 generated, thus invoking a royalty payment when no such royalty payment was previously possible. 

Advantageously, this can provide a means to distribute appropriate remunerations to copyright holders 
and licensees that would otherwise receive no payment. 



Continuing, when an instance of media can be freely distributed, a transaction is still generated. 
25 This advantageously provides a record of the number of requests for a particular instance of media, the 
location from where those requests originated, and the like, thereby providing data which can be utilized 
in marketing studies and implementing marketing strategies, etc. 



It is particularly noted that in an alternative implementation, embodiments of the present invention 
30 can be readily configured to provide a mechanism that can generate a sales/use tax transaction related to 
transfer of an instance of media. Embodiments of the present invention can be readily configured to 
calculate appropriate sales/use tax amounts relative to the location of the receiving client node. 
Advantageously, this would enable municipalities, counties, states, and other governmental agencies to 
increase revenue, thus possibly realizing a reduction in a deficit associated with a government. It is 
35 anticipated that generating sales/use tax transactions could provide from tens to hundreds of millions of 
dollars in previously untapped revenue to those governmental agencies. 
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Still referring to Figure 17, player management can include in one embodiment, but is not limited 
to, maintaining secure player application integrity, adding additional player applications to a list of approved 
player applications, removing player applications that do not meet usage restriction requirements 
5 applicable to a media file, modification of a secure player application to improve its functionality, 

modification to counteract nefarious hacking attempts, disabling the secure player application when the 
computer system on which it is operable is no longer authorized to participate in or is associated with 
network 1700, etc. 

1 0 Cache management can include in one embodiment, but is not limited to, maintaining protected 

media container file integrity, modification thereof to improve functionality or to counteract detected 
nefarious activities, disabling the protected media container file when the computer system upon which 
the protected media container file is disposed is not authorized to access and/or is no longer associated 
with network 1700. 

15 

In the present embodiment, client node 1705 and source node 1715 each have an instance of a 
usage compliance mechanism (UCM) 1800 coupled therewith. In the present embodiment, UCM 1800 of 
Figure 17 and as described with detail in Figure 18 is similar to a copyright compliance mechanism 300 
and/or a usage compliance mechanism 900 and/or 1200, as described herein with reference to Figures 3, 
20 4, 5A-5D, 6A, and/or 9, 1 1 , 12, and 15, respectively. 

Figure 18 is a block diagram of components in a usage compliance mechanism (UCM) 1800 that is 
configured to be installed and operable on a client node (e.g., 1705) and/or a source node (e.g., 1715), in 
accordance with an embodiment of the present invention. UCM 1800 includes a copyright compliance 
25 mechanism (e.g., 300) that can be analogous to CCM 300 as described herein with reference to Figures 
3, 4, 5A-5D and 6A. It is noted that UCM 1800 also includes those features and components as provided 
in UCM 900 and UCM 1200 as described herein with reference to Figures 9, 1 1, 12, and 15, respectively. 

UCM 1800 further includes a secure player application 1810, a client communication application 
30 1820, and a media storage container creator 1830. Media storage container creator 1830 is configured to 
allocate a portion of memory (e.g., 102 and/or 103) coupled to the computer system (e.g., 100) into which 
UCM 1800 is installed. Media storage container creator 1830 utilizes the allocated portion of the memory 
and creates a protected media container file (e.g., a custom file system) into which received and/or availed 
instances of media (e.g., audio files, video files, multimedia files, documents, software, and the like) are 
35 stored. It is noted that in one embodiment, media content that is stored in a protected media contain file 
(not shown) is, in addition to other encryptions applicable to the instance of media, encrypted local to the 
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computer system on which the protected media file container is disposed. In an example, an instance of 
media is stored on both client node 1705 and source node 1715 of Figure 17. Accordingly, media 
content is uniquely encrypted local to node 1705 and is uniquely encrypted local to node 1715. 
Additionally, in the context of the present embodiment, the term availed and/or availing refers to making 
5 available to a network (e.g., 1700) an instance of media that may be stored in a protected media container 
file. 

Still referring to Figure 18, UCM 1800 also includes, in one embodiment, client communication 
application 1820 which can be a custom client communication application configured to provide 
1 0 communication functionality between the nodes in a decentralized distributed network (e.g., 1700). 
Alternatively, client communication application 1820 is also well suited to be implemented in nearly any 
network including, but not limited to, network 1700. Client communication application 1820 can be 
implemented with a well known and readily available communication application which may be written in a 
commonly utilized programming language including, but not limited to, C, C++, Java, Fortran, etc. 

15 

In one embodiment, client communication application 1820 is configured to decrypt media 
content from an encryption local to a computer system on which application 1820 is operable. Client 
communication application 1820 can also be configured to encrypt media content into an intermediate 
encryption for transferring the media content to another computer system communicatively coupled with a 
20 network (e.g., 1700). Application 1820 can additionally be configured to decrypt media content that is 
received in an intermediate encryption from a computer system coupled with network 1700. Client 
communication application 1820 can further be configured to encrypt the media content into an 
encryption local to the computer system on which application 1820 is operable. 

25 In one embodiment, client communication application 1820 can utilize an intermediate encryption 

key provided by an administrative node (e.g., 1770) to encrypt the media content into an intermediate 
encryption for transfer. Application 1820 can also utilize an intermediate decryption key, also provided by 
administrative node 1770, to decrypt media content that is received in an intermediate encryption from a 
computer system coupled with network 1700. 

30 

In one embodiment, client communication application 1820 can transmit an indicator or 
acknowledge signal indicating that the media content delivered from another computer system in network 
1700 was successfully received. In one embodiment, an acknowledge signal received by administrative 
node 1770 can initiate the generation of a transaction applicable to the computer system receiving the 
35 media content and associated with the media content that was received. 
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Still referring to Figure 18, UCM 1800 further includes secure player application 1810 that can be 
configured to access contents of a protected media container file (e.g., an instance of media) and provide 
presentation of the media content to the computer system on which the media content is stored. Secure 
player application 1810 can be further configured to utilize its access to the protected media container file 
5 and make available to the network the contents thereof. In one embodiment, secure player application 
1810 can present the media content to the computer system on which it is operable while the computer 
system is offline (e.g., not coupled with network 1700 but still associated therewith). 

Secure player application 1810 can be media type specific, such as, a secure audio player 
1 0 application for audio files, a secure video player application for video files, a secure alphanumeric 

application for text files, a secure software player application for software files, and so on. It is noted that 
secure player application 1810 can be configured to interact with nearly any media type. 

In one embodiment, secure player application 1810 can be a custom media device (e.g., 310) 
1 5 which can be an emulation of a custom media device driver (e.g., 307) as described herein with reference 
to Figures 3, 4, and Figures 5A-5D. In another embodiment, secure player application 1810 can be an 
approved player application as described herein with reference to Figure 3. 

Figure 19 is an exemplary system 1900 for controlling media sharing among multiple computer 
20 systems communicatively coupled in a network in accordance with one embodiment of the present 

invention. System 1900 includes client node 1705, administrative node 1770, and source node 1715. 
Nodes 1705, 1715 and 1770 can be implemented in and communicatively coupled to network 1700 in 
one embodiment of the present invention. In one embodiment, network 1700 is a decentralized 
distributed network (e.g., 800 of Figure 8). 

25 

In one embodiment, source node 1715 and client node 1705 have logged on to network 1700, 
as described herein with reference to Figures 4, and operations 702 - 716 of Figure 7A. Client node 1705 
requests an instance of media 1902 from network 1700, shown as communication 1810. Network 1700 
transfers the request to administrative node 1770 which determines the location of an instance of media 
30 1902. Administrative node 1770 responds to client node 1705 with the location of instance of media 
1902, shown as communication 1906. 

In this example, administrative node 1770 is cognizant that source node 1715 has an instance of 
media 1902 disposed therein. In the present embodiment, instance of media content 1902 is stored in a 
35 protected media container file by memory coupled to source node 1715. Additionally, instance of media 
1902 is encrypted local to source node 1715, shown as dotted line 1914 encompassing media 1902. 
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Within Figure 19, source node 1715 sends a request to administrative node 1770 for an 
intermediate encryption key to encrypt instance of media 1902 for transfer to client node 1705, shown as 
communication 1908. Administrative node 1770 transmits an intermediate encryption key 1910 to source 
5 node 1715, shown as communication 1912. Upon receipt of intermediate encryption key 1910 by source 
node 1715, a client communication application 1820 (Figure 18) operable on source node 1715 decrypts 
media 1902 from its encryption 1914 local thereto, and encrypts media 1902 into an intermediate 
encryption, as indicated by dotted line 1916 encompassing media 1902. 

1 0 Once the client communication application 1820 of source node 1715 encrypts media 1902 into 

intermediate encryption 1916, the client communication application 1820 transmits media 1902 in 
intermediate encryption 1916 to client node 1705, shown as communication 1918. Upon client node 
1705 receiving media 1902 in intermediate encryption 1916, client node 1705 sends a request to 
administrative node 1770 for an intermediate decryption key (e.g., 1922) shown as communication 1920. 

1 5 Intermediate decryption key 1922 enables a client communication application 1820 operable on client 

node 1705 to decrypt media 1902 from its intermediate encryption 1916. It is noted that until intermediate 
encryption 1916 is decrypted, secure player 1810 (Figure 18) operable on client node 1705 is unable to 
present media 1902 to node 1705. It is further noted that if another computer system in network 1700 
has intercepted media 1902 during transfer, the intermediate encryption 1916 prevents use of media 

20 1 902 by the intercepting computer system. 

Within Figure 19, administrative node 1770 responds to the request to client node 1705 for an 
intermediate decryption key by transmitting key 1922 to client node 1705, shown as communication 
1924. Once key 1922 is received by client node 1705, the client communication application 1820 
25 operable on node 1705 decrypts media 1902 out of intermediate encryption 1916 and encrypts media 
1902 into an encryption 1926 local to client node 1705, as indicated by dotted line 1926 encompassing 
media 1902. It is noted that a local key 1928 can be used to encrypt media 1902 into encryption 1926. 

When media 1902 has been successfully received by and encrypted into encryption 1926 local to 
30 client node 1705, client node 1705 transmits an acknowledge indicator indicating successful receipt of 
media 1902, shown as communication 1930. Accordingly, upon receipt of an acknowledge indictor, 
administrative node 1770 can generate a transaction applicable to client node 1705 which is associated 
with media 1902. 

35 Advantageously, embodiments of the present invention provide components that enable 

controlled media sharing in a decentralized distributed network (a P2P network), e.g., network 800 of 
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Figure 8 and/or network 1700 of Figure 17. Further advantageous is that embodiments of the present 
invention can also track the sharing, generate royalties applicable to a receiving computer system and 
associated with a particular instance of media. Also advantageous is that embodiments of the present 
invention allow for outside instances of media to enter the network and provide compliance with copyright 
5 restrictions and/or licensing agreements associated with the instance of media. 

It is noted that one or more embodiments in accordance with the present invention described 
herein can be utilized in combination with a delivery system similar to delivery system 800 of Figure 8. For 
example, any network of one or more of the embodiments in accordance with the present invention can 
10 be substituted with a delivery system similar to deliver system 800. Alternatively, a delivery system similar 
to deliver system 800 may be implemented to include any combination of source nodes (e.g., 1715), 
client nodes (e.g., 1705), and/or administrative nodes (e.g., 1770) that operate in any manner similar to 
that described herein, but are not limited to such. 

1 5 The foregoing disclosure regarding specific embodiments of the present invention have been 

presented for purposes of illustration and description. They are not intended to be exhaustive or to limit 
the invention to the precise forms disclosed, and many modifications and variations are possible in light of 
above teaching. The embodiments were chosen and described in order to best explain the principles of 
the invention and its practical application, to thereby enable others skilled in the art to best utilize the 

20 invention and various embodiments with various modifications as are suited to the particular use 

contemplated. It is intended that the scope of the invention be defined by the Claims appended hereto 
and their equivalents. 
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